DNMLinks Guide: Installing and using PGP on MacOS

A step-by-step guide on how to install GPG Suite, create your own PGP public key, send encrypted messages, and decrypt received messages.

Installing GPG Suite

1First, download GPG Suite from [GPGTools](https://gpgtools.org/) and run the installer.

2The installation should only take a minute or so. Once completed, you will notice an app called GPG Keychain has started. This is the GUI in which you will handle all of your PGP tasks. You may notice an icon in your dock, which looks like a key chain.

Creating Your Own PGP Public Key

1In GPG Keychain, you will see a window asking you to enter some information.

Tutorial image

3Enter a fake name or an anonymous online alias (e.g., 'anon'). You can optionally enter a fake email or leave it blank. Ensure you use a relatable name, as vendors will need to find you within their list of contacts.

4Set your password but do not click 'Generate Key' just yet. Click on 'Advanced options' and set the key to 4096 bits. Uncheck the 'Key will expire on' box to prevent your key from expiring.

Tutorial image

6Click 'Generate Key'. When asked if you want to upload your public key, click 'No, Thanks!'. After a few minutes, your PGP public key will be ready for use, displayed in bold within your list of keys.

Tutorial image

8To export your PGP public key, select it, press 'Export', and save the file. If you open the file in TextEdit, you will see a long string of random characters. As long as you see 'PGP PUBLIC KEY' at the top between '-----', you can share this publicly.

Sending a PGP Encrypted Message

1To send your first encrypted message, you need to obtain the public key of the individual you wish to communicate with (e.g., a vendor). On the order page, click the PGP tab and copy the vendor's entire public PGP key to your clipboard.

Tutorial image

3Open TextEdit, paste the key, and save the file as a plain text file with a .asc extension. Then, back in GPG Keychain, click on the 'Import' button and select the file you just saved.

Tutorial image

5If everything worked out, you will see a window stating the certificate was imported successfully.

Tutorial image

7Now, prepare your message (e.g., your address). Open a fresh plain TextEdit document, type in your address and any additional information. Once done, select the entire message and go to Services > OpenPGP: Encrypt Selection.

Tutorial image

9In the GPG Services window, select the recipient you intend to send the message to. Once your recipient is selected, click 'Encrypt'.

Tutorial image

11If all is well, the text in TextEdit will be replaced with a PGP message. Your encrypted message is now ready to be sent to the vendor!

Tutorial image

Decrypting a PGP Encrypted Message

1In TextEdit, select the text you want to decrypt. Right-click on the selection and then under Services, click on OpenPGP: Decrypt Selection.

Tutorial image

3You will be prompted to enter your password. After entering it, the decrypted message will appear in place of the encrypted text.

Best Practices for Using GPG Suite

  • Always use a strong, unique password for your PGP key.
  • Regularly back up your PGP keys and store them in a secure location.
  • Verify the public keys of individuals you communicate with to prevent man-in-the-middle attacks.
  • Keep your GPG Suite software updated to protect against vulnerabilities.
  • Consider using a dedicated device for sensitive communications.

Conclusion

GPG Suite provides a user-friendly interface for managing PGP keys and encrypting messages on macOS. By following the steps outlined in this guide, you can create your own PGP public key, send and receive encrypted messages, and ensure that your communications remain private and secure. Always prioritize security and stay informed about best practices.

Contents