HACKER Q&A
📣 jgogstad

What do you use GPG for?


Let's say you bought one of those expensive Yubikeys; the U2F stuff works well enough, and you're wondering if there's anything useful to use GPG for.

Deriving SSH keys, or working with locally encrypted secrets (via [sops](https://github.com/mozilla/sops) for instance) could maybe be something. What use cases do you have where you find GPG useful?


  👤 Zizizizz Accepted Answer ✓
https://www.passwordstore.org/ And signing git commits

👤 aborsy
A GPG key in Yubikey is an excellent way to manage passwords using Password Store, SSH authentication, encrypt/decrypt backups, or sensitive files in your computer so as to prevent leakage, share passwords between devices, … There are also use cases like emails data to others or yourself, but usually the other side doesn’t use email encryption!

👤 cpach
IMO: Avoid GPG as much as you can. There are better alternatives out there. E.g. Signal, minisign, age, etc.

See also https://latacora.micro.blog/2019/07/16/the-pgp-problem.html


👤 flamboyant_ride
Secure notes with vimwiki. I version control my notes, but prefer encrypting my notes that are particularly personal.