Kleopatra for Windows installation and operation guide

• Polski: Poradnik instalacji i obsługi programu Kleopatra na Windows

GPG4Win is a software package that includes the Kleopatra tool for managing PGP keys. This guide describes how to install GPG4Win how and use Kleopatra tool on Windows.

Installing Kleopatra from Gpg4win on Windows #

1. Download the Gpg4win package from the official website: https://gpg4win.org.
2. Run the downloaded installer and follow the on-screen instructions, selecting the Kleopatra installation option.

3. After installation is complete, launch the Kleopatra application using the desktop shortcut or the Start menu.

4. Ensure the following components are installed: GnuPG, Kleopatra, GpgOL, GpgEX.
5. Select them, then click Next.

Generating keys in Kleopatra #

1. Open the Kleopatra application and click the New Key Pair button.

2. Enter your nickname. Setting a passphrase is recommended. Click Advanced Settings.

3. Select your preferred key algorithm and size RSA, 4096 bits, check the Authentication option, and click OK.

4. Set a passphrase for the key, which will be used to protect it, then click OK.

Backing up the private key in Kleopatra #

1. Go to the key management screen, select your private key, and click Backup Secret keys….

2. Select the location where you want to save the key, and click Save.

3. Ensure the key is saved in a secure location.
4. It is also recommended to export the public key.

A backup copy of the private key should be encrypted with VeraCrypt or TrueCrypt and placed on external media for protection against data loss.

Importing public keys in Kleopatra #

1. Open the email or other communication containing the public key.

2. Copy the public key to the clipboard.

3. Open the Kleopatra application and select the Notepad option.
4. Paste the public key and click Import Notepad.

5. Then certify the public key to confirm its authenticity by clicking Certify.

Encrypting messages in Kleopatra #

1. Open the Kleopatra application and click Notepad, then paste/type the content of the message you want to encrypt into the text field.

2. Select the recipient’s public key from the list of available keys.

3. Click Encrypt Notepad.

4. After encrypting the message, copy the resulting text to the clipboard.

5. You can now share the encrypted text in another app, such as via an instant messenger, or save it to a file.

We do not need to import the public key again when encrypting the next messages. The key will be saved in the program files.

Decrypting messages in Kleopatra #

1. Open the encrypted message.
2. Copy the encrypted text to the clipboard, then open the Kleopatra application.
3. Click Notepad and paste the encrypted text.

4. Click Decrypt / Verify Notepad. If prompted for a passphrase, enter the passphrase for your private key.

Signing messages in Kleopatra #

1. Open the Kleopatra application and click Notepad, then paste the content of the message you want to sign into the text field.

2. Select your private key from the dropdown list in the Sign as field.

3. Click Sign Notepad.

4. Copy the signed text to the clipboard.
5. You can now share the signed text in another app, such as via an instant messenger, or save it to a file.

Avoid signing messages that seem universal. For example, a signed “I agree” or “It’s me” message can be saved and used to impersonate you in another conversation. Signed messages should be complete sentences describing the purpose and circumstances of the signature.

Verifying messages in Kleopatra #

1. Open the signed message and copy its content to the clipboard.
2. Open the Kleopatra application, click Notepad, then paste the signed text into the text field.

3. Click Decrypt / Verify Notepad.
4. Kleopatra will display the verification result, informing you whether the signature is valid.

We do not need to import the public key again when verifying subsequent signatures of the same author. The key will be saved in the program files.