TorZon PGP Tutorial

Complete guide to PGP encryption for TorZon Market. Learn how to generate keys, encrypt messages, verify signatures, and communicate securely with vendors.

What is PGP Encryption?

PGP (Pretty Good Privacy) is an encryption program that provides cryptographic privacy and authentication. On TorZon Market, PGP is essential for:

Secure Messages

Encrypt shipping addresses and private communications with vendors

Verify Links

Confirm official TorZon mirror links using PGP signatures

Account Security

Enable 2FA and account recovery using your PGP key

Step 1: Install PGP Software

Windows

Download and install Gpg4win from the official website:

gpg4win.org

Includes Kleopatra GUI for easy key management

macOS

Download and install GPG Suite from:

gpgtools.org

Includes GPG Keychain GUI application

Linux / Tails

GPG comes pre-installed. Use terminal or install GUI:

sudo apt install seahorse

Tails OS includes all PGP tools ready to use

Step 2: Generate Key Pair

Command Line Method (All Platforms)

Open terminal and run:

gpg --full-generate-key

Choose these options:

1 Key type: RSA and RSA (default)
2 Key size: 4096 bits (maximum security)
3 Expiration: 0 = never expires (or set 1-2 years)
4 Name: Your TorZon username
5 Email: Leave blank or use anonymous email
6 Passphrase: Strong, unique password

Critical Security Warning

Never share your private key or passphrase with anyone. Back up your private key securely offline. If compromised, your encrypted messages can be read and your identity exposed.

Step 3: Export Public Key

Export your public key to share on TorZon:

gpg --armor --export "Your Name" > mypublickey.asc

Your public key will look like this:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGV...
[key data]
...=XXXX
-----END PGP PUBLIC KEY BLOCK-----

Adding Key to TorZon Profile

  1. 1. Log into your TorZon account
  2. 2. Navigate to Settings → Security
  3. 3. Paste your public key in the PGP field
  4. 4. Save changes and enable 2FA

Step 4: Encrypt Messages

Import Vendor's Public Key

First, import the recipient's public key:

gpg --import vendor_key.asc

Encrypt Your Message

Create a text file with your message (e.g., shipping address), then encrypt:

gpg --armor --encrypt --recipient "Vendor Name" message.txt

Or encrypt directly from clipboard (Kleopatra/GPG Suite):

  1. 1. Write your message in a text editor
  2. 2. Copy the text
  3. 3. Open Kleopatra → Clipboard → Encrypt
  4. 4. Select recipient and click Encrypt
  5. 5. Paste the encrypted message on TorZon

Example Encrypted Message

-----BEGIN PGP MESSAGE-----

hQIMA...
[encrypted data]
...=XXXX
-----END PGP MESSAGE-----

Step 5: Decrypt Messages

When you receive an encrypted message:

gpg --decrypt message.asc

Or using GUI:

  1. 1. Copy the encrypted message
  2. 2. Open Kleopatra → Clipboard → Decrypt
  3. 3. Enter your passphrase when prompted
  4. 4. View the decrypted message

Step 6: Verify Signatures

TorZon signs all official announcements and mirror links. To verify:

1
Import TorZon's Public Key

Get the official TorZon PGP key from the marketplace

2
Save the signed message

Copy the signed announcement to a text file

3
Verify the signature
gpg --verify message.asc

Good Signature Output

gpg: Good signature from "TorZon Market" [ultimate]

This confirms the message is authentic and unchanged.

PGP Quick Reference

Common Commands

gpg --list-keys List all keys
gpg --import key.asc Import key
gpg --delete-key "Name" Delete key
gpg --edit-key "Name" Edit key

Best Practices

  • Use 4096-bit RSA keys
  • Create offline backups
  • Use strong passphrases
  • Verify before trusting
  • Rotate keys periodically

Related Articles

Last Updated: