Skip to content
GpgFrontend

Synchronizing Public Keys with Key Server

The public keys you have saved locally can go stale. The key’s owner may revoke it, extend it, or add a new subkey, and your local copy knows nothing about that. Syncing asks a key server for the latest version of each key and updates your local copy.

Why this matters:

  • Revoked keys: If a key was revoked (for example, because its private key was stolen), you must stop using it right away. Without a sync, you cannot see the revocation.
  • New subkeys: If someone added a new signing subkey, signatures made with it look invalid to you until your local copy learns about the new subkey.

A good habit: sync before you start an important encrypted conversation, and every now and then in between.

Sync Your Public Keys

Section titled “Sync Your Public Keys”

  1. In the main window, click Manage Keys to open the Key Management interface.

  2. Choose what to sync:

    • To sync specific keys, check the boxes next to them.
    • To sync all public keys, leave all boxes unchecked.

  3. Click the Sync Public Key button in the toolbar. It is the cloud icon with a refresh symbol.

    • If you selected keys, only those are synced.
    • If you selected nothing, GpgFrontend asks you to confirm syncing all public keys.

  4. GpgFrontend checks each key against the key server. If the server has a newer version, the updates are imported into your local keyring.

Which Key Server Is Used

Section titled “Which Key Server Is Used”

Since GpgFrontend v2.1.6, Sync and Export always use https://keys.openpgp.org. This server uses the Verifying Keyserver (VKS) API, which gives better security and consistent results worldwide. You cannot change the server for these two operations.

The default key server you set in Settings applies only to key searches and imports:

  1. Open Settings and choose Key Servers, under Keys & Engines. The current default server is listed there.

  2. To use a different one for searches and imports, add your preferred key server and set it as the default.

Tips

Section titled “Tips”
  • Sync regularly: Especially before you encrypt something important or verify a signature that fails unexpectedly.
  • Check what changed: After a sync, look at any updated keys and make sure the changes make sense.
  • Use a trusted network: Sync over a network you trust, not open public Wi-Fi you know nothing about.