Post
Topic
Board Electrum
Re: Verifying the PGP Signature to electrum?
by
o_e_l_e_o
on 03/12/2023, 09:47:14 UTC
But idk if this ^ is what I need let alone useful to me in anyway at all to copy and paste it somewheere?
That is the PGP key of ThomasV, the lead dev of Electrum. You should import it in to Kleoparta by clicking on "Notepad", pasting it in, and then clicking on "Import Notepad".

Thanks that's most helpful guide posted so far, but in that video I'm sent to a file to download when I click signatures next to electrum download file but it doesn't bring to a webapge to copy and paste the text like the youtube video shows it just a file that when I open it now with GPG4Win/Kleopatra installed it brings up a bunch of options 1st one stating I got 3 signatures that cannot be verified?
You are almost there. You have confirmed that the Electrum file you have downloaded has been signed by three sets of keys. It is telling you the signatures cannot be verified because you have not yet told Kleopatra that you trust those three sets of keys as belonging to the Electrum devs.



Since you already have Kleopatra installed, the next step is to import the PGP keys of the three Electrum devs which sign the releases. As above, go to "Notepad", paste in the first key, and then click on "Import Notepad". Do this for each of three keys you will find here:
https://github.com/spesmilo/electrum/blob/master/pubkeys/ThomasV.asc
https://github.com/spesmilo/electrum/blob/master/pubkeys/Emzy.asc
https://github.com/spesmilo/electrum/blob/master/pubkeys/sombernight_releasekey.asc

Once you've done that, you should repeat what you did above to open the .asc file with Kleopatra. It should now show you that the three signatures are verified and you are safe to install.