What is PGP?

Pretty Good Privacy (PGP)
PGP stands for Pretty Good Privacy . It is a widely used encryption program that provides cryptographic privacy and authentication for data communication. PGP is used for signing, encrypting, and decrypting texts, emails, files, and more, to increase the security of communications.
PGP uses a combination of strong public-key and symmetric-key cryptography to secure messages. Each user has a public key (shared with others) and a private key (kept secret). Messages encrypted with your public key can only be decrypted with your private key.
- Encrypt messages so only the intended recipient can read them
- Digitally sign messages to prove authenticity
- Verify the identity of vendors and market staff
Why Use PGP on TorZon Market?
Your Security is Our Priority
- Confidentiality: PGP ensures that only you and the intended recipient can read your messages, even if intercepted.
- Authentication: Digital signatures verify that messages are genuinely from the sender and have not been tampered with.
- Anonymity: PGP helps protect your identity and personal information on the darknet.
- Required for Disputes: PGP is mandatory for resolving disputes and verifying staff messages on TorZon Market.

How to Create a PGP Key
Follow these steps to generate your own PGP key pair. You can use free, open-source tools on Windows, macOS, or Linux.
Step-by-Step Guide (Linux/macOS/Windows with GnuPG)
-
Install GnuPG:
-
Linux:
sudo apt install gnupg
-
macOS:
brew install gnupg
- Windows: Download Gpg4win
-
Linux:
-
Generate Your Key Pair:
Choose RSA and RSA , key size 4096 bits, and set an expiration date (recommended: 1-2 years). Use a pseudonym and a strong passphrase.gpg --full-generate-key
-
List Your Keys:
gpg --list-keys
-
Export Your Public Key:
Copy the output and add it to your TorZon profile.gpg --armor --export [email protected]
-
Backup Your Private Key:
Store this file securely and never share it with anyone.gpg --armor --export-secret-keys [email protected] > my-private-key.asc
Recommended PGP Tools
- Windows: Gpg4win (includes Kleopatra for easy key management)
- macOS: GPG Suite
- Linux: GnuPG (usually pre-installed or available via package manager)
- Android: OpenKeychain
- iOS: iPGMail

Using PGP on TorZon Market
PGP is essential for secure communication, order details, and dispute resolution on TorZon Market. Here’s how you’ll use it:
Where PGP is Used
- Account Registration: Add your public PGP key to your profile for secure messaging and password recovery.
- Order Details: Vendors may require you to encrypt your shipping address or order notes with their public key.
- Private Messaging: All sensitive messages between buyers, vendors, and staff should be PGP encrypted.
- Dispute Resolution: Staff will only communicate using signed PGP messages. Always verify signatures.
How to Encrypt & Decrypt Messages
-
Encrypt a Message:
Or paste the vendor’s public key into your PGP tool and encrypt your message.gpg --armor --encrypt --recipient "Vendor Name" message.txt
-
Decrypt a Message:
Enter your passphrase when prompted.gpg --decrypt encrypted_message.asc
-
Verify a Signature:
Always verify staff and vendor signatures before trusting messages.gpg --verify signed_message.asc
Security Tips
- Never share your private key or passphrase with anyone.
- Always verify the PGP key fingerprint of vendors and staff.
- Use a strong, unique passphrase for your PGP key.
- Backup your private key securely (offline, encrypted storage).
- Never trust unsigned or unverified messages.

PGP Key FAQ
Is PGP required on TorZon Market?
Yes. PGP is mandatory for secure communication, order details, and dispute resolution. Without a PGP key, you cannot fully use all features of TorZon Market.
Can I use the same PGP key on other markets?
For maximum security, it is recommended to use a unique PGP key for each market or service. This limits the risk if one key is ever compromised.
What if I lose my private key?
If you lose your private key or forget your passphrase, you will not be able to decrypt messages or prove your identity. Always keep secure backups in encrypted, offline storage.
How do I verify a vendor or staff PGP key?
Always check the official TorZon Market PGP key list and verify the fingerprint before sending any sensitive information. Never trust keys sent via private messages.