Introduction

This section provides a detailed explanation of what GPG keys are and do.

The guides in this book require one device of any in the following categories:

• YubiKey 5 Series

• YubiKey 5 FIPs Series

For an in-depth guide on what GPG keys are, and how to generate them, read the GPG Introductions page.

GPG is a technology / interface on your Yubikey, which stands for GNU Privacy Guard.

This interface allows you to create and store keys on your Yubikey which can be used for many things.

• Encrypt / Decrypt files using software like Gpg4win or GPGSuite.

• Sign files with your GPG key to verify you are the person who made them.

• Encrypt / Decrypt / Sign emails to other people.

• Sign commits you make with the software Github Desktop or Git.

• Connect to servers you own with SSH.

  • You can also do this with PIV, but GPG is another method depending on your setup.

Using a module is optional. If none of the above examples interest you, then you can leave PIV alone on your Yubikey.