Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
XIII
4 years agoSuper Contributor
GPG support? (like SSH)
Would it be possible to add similar support for GPG keys?
- Ryan_ParmanDedicated Contributor
I started watching this issue 15 months ago, shortly after it was opened.
- I use GPG for signing my Git commits
- I use it for signing/encrypting emails
- I use it with GoReleaser to generate GPG signatures for software packages I release
- I use it with Keybase.io
- I use it to encrypt new credentials for people who do not yet have a password manager, so that I can send them over Slack and email.
In the interim, I've been using GPG Tools (macOS) with pinentry-touchid for a reasonably modern GPG experience.
- owenvokeNew Contributor
Would love to have support for GnuPG / PGP as well. Been using it for years for commit signing, file encryption / signatures, and for communication.
- Former Member
GnuPG/PGP is almost entirely different from SSH. Having one does not make up for not having the other. The whole point of 1password is to support all of these different tools in one system. Please stop distracting with SSH and just implement similar GnuPG support.
- khergeNew Contributor
After having the pleasure of using 1Password's SSH agent, I am also very excited about the possibility of using my GnuPG keys with 1Password and a GnuPG agent. SSH is nice, but I value GnuPG's sub keys support greatly.
- I generally manage my identity with GnuPG keys, not SSH keys.
- It's already been mentioned, but key servers for verification is great.
- The ability to publish and revoke these keys.
- Being able to create distinct sub keys allows me to avoid using a master key.
- I can sign for things using dedicated signing keys.
- I can encrypt things using dedicated encryption keys.
From what I understand, if you wanted any of this without GnuPG you would have to use certificates and certificate authorities.
- NeztebNew Contributor
Chiming in to echo that I'd love GPG support!
- Former Member
+1 for this. Even with SSH signing I'd love GPG support for email among other things. It would beat adding my key as a file.
- ionosOccasional Contributor
top of my head:
- key servers for verification, web of trust (an SSH commit signature by itself means nothing, if I don't know the key)
- existing workflows based on GPG
- subkeys
- floris_1P
1Password Team
What are the benefits you're seeing of using GPG over SSH for commit signing?
- jauNew Contributor
GPG keys exist in a web of trust outside of the specific platform that I am using to host my code.
- Former Member
I would love to see support for GPG!
As previously stated by some, I use GPG for signing commits with GIT (I also prefer it over SSH keys).