Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
XIII
4 years agoSuper Contributor
GPG support? (like SSH)
Would it be possible to add similar support for GPG keys?
81 Replies
- RogueScholarOccasional Contributor
As others have stated here already, I use GPG-based signing and encryption for the following activities:
* E-mail signing (majority use case) and encryption (not-insignificant minority)
* As the framework for securing on-site incremental system backups and the occasional full volume images
* To authenticate the end product of packaging efforts for various and sundry Linux distribution package archives (this one's the doozy of the bunch)
* Securing P2P file transfers and shares over otherwise less-secure services (e.g. Dropbox, OneDrive, LocalSend, et al.)Also echoing several others in this thread, the primary functionality that I seek is really the gpg-agent service and less so the key pair generation and management, although ideally they would at some future time all be present in 1Password. Just to be able to import public and private keys exported as individual files (whether binary or ASCII-armored) and have 1P recognize them, display their identifying characteristics (algorithm, key size, fingerprint and comment) and serve them up in response to the standard gpg-agent calls would be more than enough to have me purring like a kitten for a good long while, though. It's the ability to have them available on all my devices in the same manner that 1P already does for other credentials that I'm so sorely lacking in my current workflows; it wouldn't be an onerous hardship to handle the tasks like key signing, subkey and identity addition/revocation and expiration changes with the tools I already have in place so long as in the end the updated key pairs could be returned to 1P and made use of from my other devices.
I hope that provides the clarification you were asking for, floris_1P, if not, I can get more granular.
- razvanpascalauNew Contributor
+1 for having a clean gpg management solution
- thystipsNew Contributor
+1
For storing GPG keys in clean way.
- jaytNew Contributor
+1 for sure!
- bpaciaNew Contributor
+1 to this request.
I would love to see 1Password have a built-in GPG agent, just like it does currently for SSH. It's an awesome, seamless, cross-platform experience, both in GUI and in command-line. Please bring it to us!
- Former Member
+1 (also for @aleon1220s recommendation)
It would be very helpful to derive the public key from the secret, so you can easily access it while securely store the private key.
gpg-agent integration would be awesome! (I guess this is what most mean with "like ssh")
- Former Member
+1
- aleon1220New Contributor
+1 but maybe support for other encryption mechanisms and certificates as well. thanks
- Former Member
+1!
- Former Member
I'd like to clarify my specific part of wanting GPG support. I'd like to have 1PW serve as my gpg-agent process much like it serves as my ssh-agent. This way, when I attempt to use an agent feature, I'm prompted for my password and the agent provides the necessary key. Additionally, having an option to require the 1PW password whenever a key is used similar to a Credit Card entry would be nice!
I feel like one of the advantages GPG keys offer over SSH keys for signing content is the availability of sub keys for different personas. For example, I'm the same person at work and in personal life, but I can have separate keys for both personas as subkeys to my main key. This is how maintainers of several Linux distributions are encouraged to use GPG, and it seems generally like a good practice. Additionally, as already mentioned, GPG can be used to sign and encrypt email, text files, backups, and a host of other things beyond simply signing git commits. GPG public keys are also discoverable, which makes them much easier to use for communication purposes.
Thanks for all the great work on 1PW so far!