SECURITY

PGP Encryption Complete Guide

PGP Encryption Complete Guide

What is PGP Encryption?

PGP (Pretty Good Privacy) is an encryption program that provides cryptographic privacy and authentication. On Dark Matter Market, PGP is used to encrypt sensitive communications between buyers and vendors, ensuring privacy and authenticity.

Step 1: Install Kleopatra/GPG4Win

  1. Download GPG4Win from gpg4win.org (Windows) or use built-in GPG on Linux/macOS
  2. Run the installer and include Kleopatra component
  3. Complete the installation process
  4. Launch Kleopatra from your programs menu

Step 2: Generate Your Key Pair

  1. In Kleopatra, click "New Key Pair"
  2. Select "Create a personal OpenPGP key pair"
  3. Enter a pseudonymous name (NOT your real name)
  4. Use a dedicated, anonymous email address
  5. Click "Advanced Settings" and select RSA 4096-bit
  6. Set a strong passphrase (20+ characters recommended)
  7. Click "Create" to generate your keys

Important: Never lose your private key or passphrase. Store backups securely!

Step 3: Export Your Public Key

  1. Right-click your key in Kleopatra
  2. Select "Export" to get your public key
  3. Save the key block (starts with -----BEGIN PGP PUBLIC KEY BLOCK-----)
  4. Upload this to your Dark Matter Market profile

Verify the Fingerprint Before You Trust a Key

Importing a public key is not the same as verifying it. Anyone can upload a key claiming to belong to a specific vendor ā€” encrypting to an unverified key protects your message from outside observers, but not from the person who uploaded that key if it isn't actually theirs.

  1. In Kleopatra, right-click the imported key and open "Details" to see its full fingerprint ā€” a 40-character hex string, not just the short 8-character key ID
  2. Compare it character-by-character against the fingerprint the vendor published on their own profile or in a prior signed message ā€” not a fingerprint someone sent you alongside the key itself, which proves nothing
  3. If the two don't match exactly, stop ā€” treat the key as untrusted until you can confirm it through a second channel

A mismatched fingerprint mid-conversation is one of the clearest signs an account has been hijacked or a key has been swapped ā€” see Recognizing a Genuine Dark Matter Session for the full picture of what a hijacked session looks like beyond just the key.

Step 4: Encrypt Messages

  1. Import the recipient's public key into Kleopatra
  2. Write your message in a text editor
  3. Select the text and copy it
  4. In Kleopatra, go to "Clipboard" ā†’ "Encrypt"
  5. Select the recipient's key
  6. Click "Encrypt" and the encrypted message is now in your clipboard
  7. Paste the encrypted text to send

Step 5: Decrypt Messages

  1. Copy the encrypted message (starts with -----BEGIN PGP MESSAGE-----)
  2. In Kleopatra, go to "Clipboard" ā†’ "Decrypt/Verify"
  3. Enter your passphrase when prompted
  4. The decrypted message will appear

Best Practices on Dark Matter Market

  • Always encrypt shipping addresses and sensitive details
  • Verify vendor PGP keys before purchasing
  • Use a unique key pair for darknet activities only
  • Never share your private key
  • Back up your keys in multiple secure locations
  • Sign important messages to prove authenticity