GPG Verifier - Client-Side Verification

1 GPG Public Key

Upload Key File (.asc, .gpg, .txt, etc.)

Or Paste Key Text

Paste the entire public key including BEGIN and END markers.

2 Signed File

Upload Signed File or Detached Signature (.asc, .sig, .sign, .gpg, etc.)

Or Paste Signed Text

Paste clearsigned text including signature block.

Supported Formats:

Clearsigned: Text file with embedded signature
-----BEGIN PGP SIGNED MESSAGE-----
Inline Signed: Binary file with embedded signature
-----BEGIN PGP MESSAGE-----
Detached Signature: Separate signature and data files (common for checksums/ISOs)
ASCII: -----BEGIN PGP SIGNATURE-----
Binary: .sig files (e.g., file.iso.sig)
Supports large files via streaming (OpenPGP.js v6.3.0)

Ready

Load a public key and a signed file. Verification will start automatically when both inputs are ready.

How It Works

Workflow, trust notes, and security details

Provide the GPG public key (upload file or paste text)
Upload the signed file or paste signed text
The verifier starts automatically and shows the signing key details if the signature is valid

Powered by OpenPGP.js - Learn more about OpenPGP.js

Important

Always verify key fingerprints through multiple trusted channels. Signature verification proves a file was signed by a specific key, but you must independently verify the key belongs to the expected entity.

📥 Download for Offline Use

Download this application for air-gapped or offline verification

Why Download?

This application is designed to work completely offline. Download it once and use it anywhere - even on air-gapped systems with no internet connection.

What You Get

Complete standalone application (no installation required)
All dependencies included (OpenPGP.js v6.3.0 vendored locally)
Works without internet connection

Quick Download (Browser Method)

Save this page: Press Ctrl+S (Windows/Linux) or Cmd+S (Mac)
Choose format: Select "Webpage, Complete" or "HTML with files"
Save location: Choose a folder on your computer
Done! Open the saved index.html in any browser

Download Full Package

Recommended: Download the ready-to-use offline package directly from this site:

💾 Download Offline Package (196KB)

What you get: Complete standalone application with all dependencies. Extract and open index.html - no installation required!

Using Offline

On your computer:

Simply open index.html in any modern browser
No web server required for basic use
Works from USB drives, network shares, or local storage

On an air-gapped system:

Transfer the folder to a USB drive
Copy to the air-gapped computer
Open index.html directly in the browser
No internet connection needed - everything is local

Verify Integrity

For maximum security, verify the package integrity:

# Check OpenPGP.js integrity
sha256sum openpgp.min.js

# Compare against official release:
# https://github.com/openpgpjs/openpgpjs/releases/tag/v6.3.0

File Structure

The downloaded package contains:

gpg-verifier/
├── index.html           # Main application
├── app.js               # Application logic
├── styles.css           # Styling
├── openpgp.min.js       # Crypto library (local)
├── README.md            # Documentation
├── SECURITY.md          # Security information
└── LICENSE              # MIT License