PGP Encryption Complete Tutorial
Master PGP encryption for Nexus Market 2FA and secure communications
🔐 PGP is MANDATORY on Nexus Market
Without PGP, you cannot register or log into Nexus Market. This guide will teach you everything you need to know.
What is PGP?
PGP (Pretty Good Privacy) is a cryptographic system that uses two keys:
🔓 Public Key
Share this with everyone. People use it to encrypt messages to you and verify your signatures.
🔒 Private Key
NEVER SHARE THIS! Only you have it. Use it to decrypt messages and sign messages.
Why Nexus Market Requires PGP
🛡️ Mandatory 2FA Authentication
Nexus uses PGP-based 2FA instead of TOTP codes. Even if attackers steal your password, they can't log in without your private key.
🎣 Anti-Phishing Protection
Phishing sites can steal passwords, but they cannot replicate PGP challenges. If you can't decrypt the 2FA challenge, it's a fake site.
✉️ Encrypted Communications
Encrypt shipping addresses and sensitive info with vendor public keys. Even Nexus admins can't read encrypted messages.
Installing GPG/Kleopatra
We recommend Kleopatra (Windows/macOS) or GPG (Linux) for managing PGP keys.
💻 Windows/macOS: Install Gpg4win
- Download Gpg4win from:
gpg4win.org - Install with default settings
- Launch Kleopatra (included with Gpg4win)
🐧 Linux: Install GPG
sudo apt install gnupg # Debian/Ubuntu
sudo dnf install gnupg # Fedora
Generating Your PGP Key Pair
⚠️ Important Settings
- Name: Use a pseudonym (NOT your real name)
- Email: Use a disposable/anonymous email
- Key Size: Minimum 4096 bits (recommended)
- Expiration: Set to "Never" for market use
Using Kleopatra (Windows/macOS):
- 1 Open Kleopatra → File → New OpenPGP Key Pair
- 2 Enter a pseudonym name and disposable email
- 3 Click "Advanced Settings" → Set key size to 4096 bits
- 4 Create a STRONG passphrase (20+ characters recommended)
Using GPG (Linux):
gpg --full-generate-key
# Select: RSA and RSA (default)
# Key size: 4096
# Expiration: 0 (does not expire)
# Name: YourPseudonym
# Email: anonymous@email.com
Encrypting & Decrypting Messages
🔒 To Encrypt a Message
- Copy the recipient's public key
- Import it into Kleopatra/GPG
- Write your message in Notepad
- In Kleopatra: Clipboard → Encrypt
- Select recipient's public key
- Send the encrypted text
🔓 To Decrypt a Message
- Copy the PGP encrypted message
- In Kleopatra: Clipboard → Decrypt/Verify
- Enter your private key passphrase
- The decrypted message appears
- Delete the decrypted text after reading
Exporting Your Public Key for Nexus Market
You'll need to paste your public key into Nexus Market during registration and 2FA setup.
Kleopatra:
- Right-click your key → Export...
- Or: Clipboard → Copy Public Keys
- Paste into Nexus Market registration form
GPG (Linux):
gpg --armor --export your@email.com
Key Management Best Practices
🚨 NEVER Share Your Private Key
If someone asks for your private key, they are scamming you. Nexus admins will NEVER ask for it.
💾 Backup Your Private Key
Export your private key and store it securely offline. If you lose it, you lose access to your Nexus account forever.
🔑 Use a Strong Passphrase
Your private key passphrase should be 20+ characters. Use a password manager.
Ready to Set Up 2FA?
Now that you have a PGP key, continue to the 2FA setup guide.