
Ssb> rsa4096/0xFD8194C54A63DBD5 created: expires: Īlternatively, creating a new key on the card General key info.: pub rsa4096/0x5B640B9F9600F122 Philihp Busby : Yubico YubiKey FIDO CCIDĪpplication ID. To move these to your Yubikey, run the command When a message is encrypted, GPG uses the newest E subkey, i.e. You should only have one key with the E usage.You can have any number of S signing keys or A authentication keys.I think it’s not a bad idea to create another subkey for “Authentication” or add that usage to an existing key, but important:, but there are two important points: In the brackets in the 4th column, you can see for the master key meaning it is meant for the “Signing” usage and the “Certification” usage, and for the subkey meaning it is meant for “Encryption”. The third column is the date the key was created, which is relevant for subkeys.If either of these says pub or sub, it means “i just have the public key”, and that’s a problem.On the left the sec means “i have the secret key”.Most people just have one master key, and one encryption subkey if you run gpg -list-secret-keys, you may see something like this: If you’ve created your key already, migrate it to the card.

While waiting for this to arrive, you can continue with a GPG key on your hard drive just make sure you protect it with a passphrase, which GPG will strongly encourage, because otherwise there’s no point.

I use Mutt for most of my gmail needs for a number of reasons, including spam is usually HTML-only, while (actually important) emails written by humans always have a readable text-only format.
