Most Linux distributions don`t have Kleopatra preinstalled and it can be installed manually.
How to install Kleopatra on Debian/Ubuntu based Linux with command 'apt install':
1. Open the Terminal (Ctrl + Alt + T) and type the following command:
$
sudo apt install kleopatra -y2. Once it is installed you can run it from the Applications Menu or with a command [i]'kleopatra'.
$
kleopatraor with Synaptic Package Manager:
1. From the Applications Menu open ‘Synaptic Package Manager’ and into search box type 'Kleopatra', in the given results ‘Mark for installation’ the package ‘kleopatra’ (Description: Certificate Manager and Unified Crypto GUI).
2. In the next pop-up window press the button ’Mark’ and then the button ‘Apply’ two times for the installation to begin.
3. Close the Synaptic Package Manager and Kleopatra can be run from the Applications Menu.
There are two types of PGP keys – a private (secret) and a public.
The public PGP key is used for encrypting a message sent to the vendor or anybody else.
The public PGP key can be shared with anyone who wants to encrypt a message for you.
The private PGP key, also called secret, is used for decrypting an encrypted message.
The secret PGP key is meant to be held only by the owner of the PGP key that means only you. Never share your private (secret) key with anyone!
Terms used in the guide:
• certificate = PGP key
• public PGP key (public key)
• private/secret PGP key = secret key
• encrypt/sign
• decrypt/verify
• Import/Export
• Backup (secret key)
• Change passphrase
Step-by-step how to create a new PGP key pair in PGP key manager "Kleopatra":
[color=red](Disconnect from the internet when generating your new own PGP key pair)[/color=red]
Creating new PGP key pair:
1. Open Kleopatra. Click button ‘File’ in the top left corner and then press ‘New OpenPGP Key Pair’ (Ctrl + N).
2. Kleopatra asks to enter either an Email address or a Name. In case choosing your desired name there is no need to enter an email address.
The Email address field is not required if the name is filled, you can leave it blank – optionally you can enter a fake email address or an email that you got from an anonymous TOR email service provider.
Recommended Advanced Settings when creating a PGP key pair:
Go into ‘Advanced Settings’. It is suggested selecting RSA and + RSA option at 4,096 bits both to create your PGP key pair with.
In the section ‘Certificate Usage’:
Recommended choosing ‘Valid until’ - ‘No date’ (or just unticking this option), recommended ticking options - ‘Signing’ ‘Encryption’ ‘Certification’ ’Authentication’.
How to encrypt/sign a message
1. With Kleopatra open, press the 'Notepad' button, type your text of a message or you can paste copied text into this notepad. Once you have written the message in the notepad go to the 'Recipients' tab.
2. 'Sign as' serves for proving authenticity to the recipient that the message was encrypted by your PGP key and not someone else. If you wish to sign your message, in the drop-down menu select your PGP key you created earlier.
3. It is recommended to tick the 'Encrypt for me' in order to be able to decrypt your own encrypted message afterwards. In the drop-down menu select your PGP key.
4. The most important step is to tick the 'Encrypt for others' box – here you can choose the recipient you want to encrypt the message for. You can enter a name or email address of the recipient in to a field or press the button on the left 'Show certificate list'
5. Copy the encrypted message and paste it into the conversation/chat or email.
Select it from the beginning -----BEGIN PGP MESSAGE----- to the end -----END PGP MESSAGE-----.
Note: You must have imported a recipients public PGP key beforehand. Press the 'Sign / Encrypt Notepad' button and you will have an encrypted message.
Alternative way of encrypting a message using clipboard:
1. Copy the text meant to be encrypted into clipboard (select the text and then press Ctrl + C to copy it to Clipboard).
2. With Kleopatra open press 'Tools > Clipboard > Encrypt...' from the Menubar.
3. In the following pop-up window tick 'OpenPGP' and select a recipient – button 'Add Recipient'.
4. Use the 'Search' or manually select the 'Name' of the Recipient. Add also your own PGP certificate (Add Recipient) to be able to decrypt your own text, then hit the 'OK' button.
5. Click 'Next' > the encryption was successful it shows > 'Encryption succeeded', just press 'OK' and your encrypted text is in copied to your Clipboard and it can be pasted (Ctrl +V).
Please note that in the steps above is missing Sign option.
How to import someone else`s public PGP key:
1. To import someone’s public key copy whole it into clipboard, then on Kleopatra press Tools > Clipboard > Certificate import and then click OK. The pop-up window will say 'Imported: 1'.
!!! Please note that every public key begins with the following !!!
-----BEGIN PGP PUBLIC KEY BLOCK-----
and ends with
-----END PGP PUBLIC KEY BLOCK-----
2. It can be also imported by pasting copied public key into the Notepad and the button ’Import notepad’ becomes available.
3. In the next pop-up window press the button ’Import’.
4. In the next window Certify Certificate select in the roll-out menu ’Certify with’: your own certificate > button ’Certify’, in case a password was set up during creating the key pair it will ask to enter it.
5. Press OK twice and public key is imported successfully.
Importing public PGP key with Ctrl + I from a file with ending *_public.asc
1. Select Certificate File > Open > OK