this post was submitted on 20 Jun 2023
7 points (88.9% liked)

Sysadmin

7713 readers
2 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world

founded 1 year ago
MODERATORS
 

I'm interested to know whether you have a specific process or tool you use for managing your PGP keys?

I was thinking it'd be great if Lemmy allowed you to use PGP to verify your identity across multiple users on different instances. This made me think I need a good way to make sure I never lose my keys!

you are viewing a single comment's thread
view the rest of the comments
[–] benkinder@infosec.pub 3 points 1 year ago

I install my keys on 5 Yubikeys and then encrypt a copy of the private key so that it can only be decrypted with one of the Yubikeys. I store the encrypted bundle on Google drive and I’ve spread out the Yubikeys a little geographically by sending them to friends who I trust (PIN is still required to use the Yubikey so there’s still a layer of security). I also keep one of them in a safe at my house just in case.

I do feel like I may have gone a little overboard but maybe something similar could work for you!