Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

How can I export a pgp-key from one machine and import it to another? The only way I figured out (in seahorse) was to import it to the section other keys.

But I want to use one single pgp-key from diffrent machines. Is this easier to solve via terminal and gpg? I'm a little bit confused about seahorse.

share|improve this question
add comment

1 Answer

up vote 13 down vote accepted

In a terminal, run the following:

gpg --export-secret-key -a > secretkey.asc

And on the other system, import the secret key with:

gpg --import secretkey.asc

Alternatively, if you've got ssh access to the other system you should be able to combine these two actions into a single command:

gpg --export-secret-key -a | ssh othermachine gpg --import -

Once the keyfiles have served their purpose, securely delete them:

shred secretkey.asc && rm secretkey.asc

or

shred --remove secretkey.asc

Make sure to shred and remove the key instead of using normal deletion. Additionally, instead of moving the keyfile with mv, copy it, then shred and remove the original. These methods will prevent an attacker from recovering the key through low-level bit inspection.

share|improve this answer
2  
This is the correct way to copy over the key. However, I would suggest to create subkeys and only copy those over instead. The main PC will then keep the primary key so it is possible to revoke individual subkeys in case they get compromised. See for example wiki.debian.org/subkeys on how to do this. (I might find some time to write this an answer here.) –  gertvdijk Aug 20 '13 at 18:17
    
You also need to trust the imported key on the destination machine before you can use it: stackoverflow.com/a/10718194/1610035 –  Andreas J. Feb 14 at 22:18
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.