GPG keys
Add your GPG public key so commits and tags you sign show as Verified. Open Settings → GPG Keys.
Add a GPG key
Export your public key:
1 gpg --armor --export <key-id> Choose Add GPG key and paste the whole block, starting with
-----BEGIN PGP PUBLIC KEY BLOCK-----.Choose Add key.
The key ID, fingerprint, subkeys and email addresses are read from the key. Private keys are refused, and a key can be registered to only one account.
From the terminal: cafe signing gpg add key.asc.
Remove a GPG key
Choose the bin icon on the key and confirm with Delete.
How verification shows
Signed commits and annotated tags show Verified or Unverified in history and on the commit page. Unsigned ones show no badge. To sign with an SSH key instead, add it with signing usage on the SSH keys page.