# GPG keys

Add your GPG public key so commits and tags you sign show as **Verified**. Open
**Settings → GPG Keys**.

## Add a GPG key

1. Export your public key:

   ```sh
   gpg --armor --export <key-id>
   ```

2. Choose **Add GPG key** and paste the whole block, starting with
   `-----BEGIN PGP PUBLIC KEY BLOCK-----`.
3. Choose **Add key**.

The key ID, fingerprint, subkeys and email addresses are read from the key.
Private keys are refused, and a key can be registered to only one account.

From the terminal: `cafe signing gpg add key.asc`.

## Remove a GPG key

Choose the bin icon on the key and confirm with **Delete**.

## How verification shows

Signed commits and annotated tags show **Verified** or **Unverified** in
history and on the commit page. Unsigned ones show no badge. To sign with an
SSH key instead, add it with signing usage on the [SSH keys](https://staging.git.cafe/docs/account/ssh-keys.md) page.