PGP key info
Paste an armored OpenPGP key and inspect its fingerprint, key ID, algorithm, user IDs, creation date, expiry, and subkeys locally.
Inspect OpenPGP key metadata locally
Use this PGP key info tool to check an ASCII-armored OpenPGP public or private key before you trust, import, or share it. The tool reports the primary fingerprint, short key ID, public-key algorithm, creation and expiry dates, user IDs, and subkey fingerprints/capabilities.
Everything runs in your browser with WebAssembly. The pasted key is not uploaded to a server, and no account or network lookup is required.
FAQ
What can I paste?
Paste a full -----BEGIN PGP PUBLIC KEY BLOCK----- or
-----BEGIN PGP PRIVATE KEY BLOCK-----. For private keys, the tool only
derives and displays public metadata; it does not decrypt or export secret
material.
Why check the fingerprint?
The full fingerprint is the safest compact identifier for an OpenPGP key. Use it when comparing a key against an independently published fingerprint or when checking that a signing/encryption key is the one you expected.
How is the expiry date determined?
OpenPGP stores expiry as a validity period relative to the key's creation time, so the tool computes created_at + validity days and shows it as an RFC-3339 timestamp. A key with no validity period shows no expires_at at all — it never expires. Primary key and subkeys are reported separately, so a subkey can expire before the primary.
What does "key failed self-verification" mean?
Every OpenPGP key carries self-signatures binding its user IDs and subkeys to the primary key. The tool verifies those before reporting anything; if verification fails, the key is corrupted, truncated (a partial paste is common), or has been tampered with — don't import it.
What do the subkey capabilities "sign" and "encrypt" mean?
They are the flags each subkey was created with: a sign subkey can issue signatures, an encrypt subkey is the one others encrypt messages to. A typical modern key has a signing-capable primary key plus a separate encryption subkey.
Developer & Automation Access
Run it from the terminal
Same engine as this page, headless — via the gizza CLI:
gizza tool pgp-key-info "-----BEGIN PGP PUBLIC KEY BLOCK-----"New to the CLI? Get gizza →
Open it by URL
Pre-fill and auto-run this tool with query parameters — the names match the API/CLI:
https://gizza.ai/tools/pgp-key-info/?key=-----BEGIN%20PGP%20PUBLIC%20KEY%20BLOCK-----Machine-readable descriptor: tool.json — title + parameters JSON Schema for agents.