# SSH, OpenPGP, GPG **URL:** https://onlykey.discourse.group/c/ssh-and-pgp-gpg/11.md [Latest](https://onlykey.discourse.group/latest.md) · [Categories](https://onlykey.discourse.group/categories.md) --- ## [I have published an article on how to configure Onlykey with fido2 for use with servers and github](https://onlykey.discourse.group/t/i-have-published-an-article-on-how-to-configure-onlykey-with-fido2-for-use-with-servers-and-github/1015)
**Author:** [@donquijote](https://onlykey.discourse.group/u/donquijote)\ **Replies:** 1\ **Last updated:** [March 2, 2023, 3:30pm UTC](https://onlykey.discourse.group/t/i-have-published-an-article-on-how-to-configure-onlykey-with-fido2-for-use-with-servers-and-github/1015 "2023-03-02T15:30:18Z")
Hi community, I have published an article on how to configure Onlykey with fido2 for use with servers and github. I hope you find it useful. The article in English: Tutorial: How to generate and use Fido2 SSH keys wit… --- ## [About the SSH and PGP/GPG category](https://onlykey.discourse.group/t/about-the-ssh-and-pgp-gpg-category/18)
**Author:** [@t11](https://onlykey.discourse.group/u/t11)\ **Replies:** 0
Discussion and support for using OnlyKey as a hardware security key for SSH and OpenPGP/GPG. OnlyKey SSH is supported in the latest version of OpenSSH or by using OnlyKey Agent. OpenPGP is supported in OnlyKey Webcrypt a… --- ## [Two bugs when adding some pubkey in the keyring](https://onlykey.discourse.group/t/two-bugs-when-adding-some-pubkey-in-the-keyring/1555)
**Author:** [@Henri\_GEIST](https://onlykey.discourse.group/u/Henri_GEIST)\ **Replies:** 2\ **Last updated:** [June 8, 2026, 8:00pm UTC](https://onlykey.discourse.group/t/two-bugs-when-adding-some-pubkey-in-the-keyring/1555 "2026-06-08T20:00:56Z")
Hello, I have used my OnlyKey successfully for a long time now. And I am mostly happy with it. But I have just found last week two distinct but probably related bugs in the gpg-agent. First when I add some new public… --- ## [Python Interpreters marked externally-managed since Debian 12 “bookworm”](https://onlykey.discourse.group/t/python-interpreters-marked-externally-managed-since-debian-12-bookworm/1163)
**Author:** [@Mango\_Mungo](https://onlykey.discourse.group/u/Mango_Mungo)\ **Replies:** 2\ **Last updated:** [June 8, 2026, 3:18pm UTC](https://onlykey.discourse.group/t/python-interpreters-marked-externally-managed-since-debian-12-bookworm/1163 "2026-06-08T15:18:19Z")
If you wish to install onlykey-cli & onlykey-agent you must create a virtual environment now using python3 -m venv path/to/venv Debian Install with dependencies: $ sudo apt update && sudo apt upgrade $ sudo apt instal… --- ## [Using stored GPG keys with OnlyKey DUO](https://onlykey.discourse.group/t/using-stored-gpg-keys-with-onlykey-duo/1537)
**Author:** [@cb99](https://onlykey.discourse.group/u/cb99)\ **Replies:** 0\ **Last updated:** [March 29, 2026, 2:34am UTC](https://onlykey.discourse.group/t/using-stored-gpg-keys-with-onlykey-duo/1537 "2026-03-29T02:34:11Z")
Hello, I recently have been trying to get my OnlyKey DUO set up to use my secret keys for signing and decrypting with the OnlyKey. However I am running into some issues as the onlykey-gpg tool seems to have changed sign… --- ## [Got bad IV in decryption](https://onlykey.discourse.group/t/got-bad-iv-in-decryption/1472)
**Author:** [@jlariviere](https://onlykey.discourse.group/u/jlariviere)\ **Replies:** 1\ **Last updated:** [July 2, 2025, 10:00am UTC](https://onlykey.discourse.group/t/got-bad-iv-in-decryption/1472 "2025-07-02T10:00:36Z")
I just received my OnlyKey, and am (trying) setting it up. I updated to the latest firmware in case there were bugs that have been addressed between shipping and now. I had a TON of issues when I tried to load OpenSSH … --- ## [Using Onlykey webcrypt with a derived GPG key](https://onlykey.discourse.group/t/using-onlykey-webcrypt-with-a-derived-gpg-key/1462)
**Author:** [@Henri\_GEIST](https://onlykey.discourse.group/u/Henri_GEIST)\ **Replies:** 0\ **Last updated:** [May 22, 2025, 12:29pm UTC](https://onlykey.discourse.group/t/using-onlykey-webcrypt-with-a-derived-gpg-key/1462 "2025-05-22T12:29:49Z")
Hello, I would like to know if it is possible one way or an other to use the “Onlykey webcrypt” tool with the derived GPG key from the OnlyKey instead of using the keys in the slot ECC1 and ECC2 ? I would like to do th… --- ## [Deciphering a GPG file on Windows](https://onlykey.discourse.group/t/deciphering-a-gpg-file-on-windows/1460)
**Author:** [@Babacar](https://onlykey.discourse.group/u/Babacar)\ **Replies:** 5\ **Last updated:** [May 22, 2025, 11:19am UTC](https://onlykey.discourse.group/t/deciphering-a-gpg-file-on-windows/1460 "2025-05-22T11:19:58Z")
Hello I can’t decipher any file with my Onlykey on Windows 11. When I go to the OnlyKey application and want to decipher a file it opens a tab in my browser. Then I enter the requested data and when I want to decipher… --- ## [Questions about Admin Mode Exit and SSH Key Confirmation (OnlyKey DUO)](https://onlykey.discourse.group/t/questions-about-admin-mode-exit-and-ssh-key-confirmation-onlykey-duo/1455)
**Author:** [@denis.beurive](https://onlykey.discourse.group/u/denis.beurive)\ **Replies:** 3\ **Last updated:** [May 10, 2025, 7:51pm UTC](https://onlykey.discourse.group/t/questions-about-admin-mode-exit-and-ssh-key-confirmation-onlykey-duo/1455 "2025-05-10T19:51:00Z")
Hi, I’m using an OnlyKey DUO with firmware version v3.0.4-prodn, and the app version 5.3.6 on Windows 10. The device works well. I followed the documented steps to load an SSH key: Entered Admin mode by holding butto… --- ## [OnlyKey touch 3 or 1, how to make only one](https://onlykey.discourse.group/t/onlykey-touch-3-or-1-how-to-make-only-one/1436)
**Author:** [@a.s.nurulin](https://onlykey.discourse.group/u/a.s.nurulin)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 6:57pm UTC](https://onlykey.discourse.group/t/onlykey-touch-3-or-1-how-to-make-only-one/1436 "2025-03-19T18:57:42Z")
gl1 git pull Enter the 3 digit challenge code on OnlyKey to authorize \ 5 3 5 remote: Enumerating objects: 5, done. remote: Counting objects: 100% (5/5), done. remote: Compressing objects: 1… --- ## [Step by step documentation](https://onlykey.discourse.group/t/step-by-step-documentation/1379)
**Author:** [@Henri\_GEIST](https://onlykey.discourse.group/u/Henri_GEIST)\ **Replies:** 3\ **Last updated:** [February 6, 2025, 8:08pm UTC](https://onlykey.discourse.group/t/step-by-step-documentation/1379 "2025-02-06T20:08:43Z")
Hello OnlyKey users ! I have just written a step by step straight forward documentation from unboxing to being able to forward GPG agent over SSH passing by choosing good passphrases and making offline backup on paper w… --- ## [Requiring pins on only key duo doesn't work](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133)
**Author:** [@wrin](https://onlykey.discourse.group/u/wrin)\ **Replies:** 3\ **Last updated:** [October 9, 2024, 10:05am UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133 "2024-10-09T10:05:32Z")
I’m trying to test if the only key duo can use my pgp keys, but both the agent and the webcrypt askfor a pin you cannot actually enter anywhere. The duo only has 3 buttons, so typing a 4 or a 6 isn’t an option. The agent… --- ## [Initialize PASS](https://onlykey.discourse.group/t/initialize-pass/1349)
**Author:** [@MLS69](https://onlykey.discourse.group/u/MLS69)\ **Replies:** 3\ **Last updated:** [October 4, 2024, 1:04am UTC](https://onlykey.discourse.group/t/initialize-pass/1349 "2024-10-04T01:04:35Z")
Hi. I’ve been using Pass with Onlykey derived PGP keys without problems. I decided to try to use stored PGP keys (RSA 4096 generated from CLI) to my OKY and was able to successfully initialize OKY with those derived ke… --- ## [GPG stored key initialisation](https://onlykey.discourse.group/t/gpg-stored-key-initialisation/1359)
**Author:** [@Henri\_GEIST](https://onlykey.discourse.group/u/Henri_GEIST)\ **Replies:** 0\ **Last updated:** [September 30, 2024, 1:51pm UTC](https://onlykey.discourse.group/t/gpg-stored-key-initialisation/1359 "2024-09-30T13:51:01Z")
Hello ! Many thanks for this wonderfull OnlyKey product. Just a point about the instructions on how to initialize GPG stored keys in the page: as the code example contain \[email protected\] replacement in: $ onlykey… --- ## [4096 bit RSA key problem (firmware)](https://onlykey.discourse.group/t/4096-bit-rsa-key-problem-firmware/1331)
**Author:** [@lenart](https://onlykey.discourse.group/u/lenart)\ **Replies:** 5\ **Last updated:** [September 30, 2024, 1:16pm UTC](https://onlykey.discourse.group/t/4096-bit-rsa-key-problem-firmware/1331 "2024-09-30T13:16:18Z")
Problem description I have been debugging an issue for a day now.. I’ve read up what I found in the docs, in the forum and in the source - both client side and firmware. For some legacy reasons I must be able to use 409… --- ## [GPG for Git After Fresh Install](https://onlykey.discourse.group/t/gpg-for-git-after-fresh-install/1353)
**Author:** [@adam](https://onlykey.discourse.group/u/adam)\ **Replies:** 0\ **Last updated:** [September 26, 2024, 3:09am UTC](https://onlykey.discourse.group/t/gpg-for-git-after-fresh-install/1353 "2024-09-26T03:09:11Z")
Hi, I am looking for confirmation on the correct process to get my GPG signing working again after a fresh install. I have backed up my .gnupg folder but I am hoping that isn’t a requirement from a practicality point of… --- ## [I cannot generate a RSA SSH key on the device](https://onlykey.discourse.group/t/i-cannot-generate-a-rsa-ssh-key-on-the-device/1319)
**Author:** [@Stammer9222](https://onlykey.discourse.group/u/Stammer9222)\ **Replies:** 2\ **Last updated:** [August 11, 2024, 5:58pm UTC](https://onlykey.discourse.group/t/i-cannot-generate-a-rsa-ssh-key-on-the-device/1319 "2024-08-11T17:58:03Z")
When I run the command from the instructions. onlykey-agent user@host -e rsa -sk RSA2 Traceback (most recent call last): File "/usr/local/bin/onlykey-agent", line 8, in \ sys.exit(ssh\_agent()) … --- ## [Discoverable (resident), Non-Discoverable and Derived SSH Keys](https://onlykey.discourse.group/t/discoverable-resident-non-discoverable-and-derived-ssh-keys/1268)
**Author:** [@adam](https://onlykey.discourse.group/u/adam)\ **Replies:** 0\ **Last updated:** [April 24, 2024, 11:26am UTC](https://onlykey.discourse.group/t/discoverable-resident-non-discoverable-and-derived-ssh-keys/1268 "2024-04-24T11:26:24Z")
Hi All, I am just looking to better understand this stop and I am not getting enough information in the documents to help me join the dots. Resident SSH Keys I understand with resident SSH keys that the all the inform… --- ## [Error when using fido2 keys](https://onlykey.discourse.group/t/error-when-using-fido2-keys/1014)
**Author:** [@donquijote](https://onlykey.discourse.group/u/donquijote)\ **Replies:** 3\ **Last updated:** [February 15, 2024, 10:07pm UTC](https://onlykey.discourse.group/t/error-when-using-fido2-keys/1014 "2024-02-15T22:07:14Z")
Hi, If I create resident keys like this, it just asks me to touch the key and if I can ssh into my server: ssh-keygen -t ed25519-sk -O resident -O application=ssh:test2 -f ~/.ssh/test2 -P “” But if I add “-O verify-re… --- ## [Getting my PGP keys from Kleopatra to OnlyKey](https://onlykey.discourse.group/t/getting-my-pgp-keys-from-kleopatra-to-onlykey/1211)
**Author:** [@auriuman78](https://onlykey.discourse.group/u/auriuman78)\ **Replies:** 0\ **Last updated:** [January 23, 2024, 8:38pm UTC](https://onlykey.discourse.group/t/getting-my-pgp-keys-from-kleopatra-to-onlykey/1211 "2024-01-23T20:38:34Z")
I have three keys. One is a single key belonging to one email address. The other two keys belong to another email address - two keys, separate fingerprints, one address. They list as 3 separate keys in Kleopatra… this… --- ## [Can't setup OnlyKey as 2fa device with SSH Keys](https://onlykey.discourse.group/t/cant-setup-onlykey-as-2fa-device-with-ssh-keys/1147)
**Author:** [@gerlos](https://onlykey.discourse.group/u/gerlos)\ **Replies:** 3\ **Last updated:** [October 10, 2023, 5:40pm UTC](https://onlykey.discourse.group/t/cant-setup-onlykey-as-2fa-device-with-ssh-keys/1147 "2023-10-10T17:40:13Z")
Hello, I’m trying to setup my onlykey as a 2fa device for a new ssh key (as in OpenSSH | Docs), but I always get a “Key enrollment failed: invalid format” error immediately. Moreover, my onlykey doesn’t even blink - it… --- ## [I have created an interactive script to create a fido key in onlykey and push it to github](https://onlykey.discourse.group/t/i-have-created-an-interactive-script-to-create-a-fido-key-in-onlykey-and-push-it-to-github/1158)
**Author:** [@donquijote](https://onlykey.discourse.group/u/donquijote)\ **Replies:** 1\ **Last updated:** [September 26, 2023, 1:01pm UTC](https://onlykey.discourse.group/t/i-have-created-an-interactive-script-to-create-a-fido-key-in-onlykey-and-push-it-to-github/1158 "2023-09-26T13:01:51Z")
Hello, I’ve posted a bash script that helps you create a fido2 key for github in your onlykey, upload it to github using the github api, configure your .ss/config file, and finally configure git. In a few seconds you c… --- ## [Can onlykey be used with scdaemon](https://onlykey.discourse.group/t/can-onlykey-be-used-with-scdaemon/1140)
**Author:** [@lyndhurst](https://onlykey.discourse.group/u/lyndhurst)\ **Replies:** 2\ **Last updated:** [September 22, 2023, 9:09am UTC](https://onlykey.discourse.group/t/can-onlykey-be-used-with-scdaemon/1140 "2023-09-22T09:09:53Z")
Does anyone know if it is possible to set up onlykey as a smart using scdaemon and regular gpg-agent ? --- ## [How to use GPG keys after seemingly successful loading?](https://onlykey.discourse.group/t/how-to-use-gpg-keys-after-seemingly-successful-loading/1138)
**Author:** [@lyndhurst](https://onlykey.discourse.group/u/lyndhurst)\ **Replies:** 2\ **Last updated:** [August 24, 2023, 12:05pm UTC](https://onlykey.discourse.group/t/how-to-use-gpg-keys-after-seemingly-successful-loading/1138 "2023-08-24T12:05:14Z")
Hi, I am trying to load my gpg private key from proton mail onto my Onlykey Duo, and use it on my laptop. I first exported the private key from proton mail, no problem there. Then I followed the documentation steps to … --- ## [Only key can only be set to challange mode?](https://onlykey.discourse.group/t/only-key-can-only-be-set-to-challange-mode/1136)
**Author:** [@wrin](https://onlykey.discourse.group/u/wrin)\ **Replies:** 0\ **Last updated:** [August 8, 2023, 3:20pm UTC](https://onlykey.discourse.group/t/only-key-can-only-be-set-to-challange-mode/1136 "2023-08-08T15:20:09Z")
When trying to set the onlykey duo into button press mode, both in the CLI as the GUI it claims to set it in challenge mode: OnlyKey\> storedkeymode 1 Successfully set stored key challenge mode --- ## [Git commit signing with onlykey-agent](https://onlykey.discourse.group/t/git-commit-signing-with-onlykey-agent/1114)
**Author:** [@Ian](https://onlykey.discourse.group/u/Ian)\ **Replies:** 2\ **Last updated:** [July 28, 2023, 3:56pm UTC](https://onlykey.discourse.group/t/git-commit-signing-with-onlykey-agent/1114 "2023-07-28T15:56:44Z")
I’m using the onlykey-agent with SSH for git. It works fine for SSH (git pull/push etc) but not for signing commits. I generated a public key with: onlykey-agent identity@myhost \> ~/.ssh/identity@myhost.pub I have con… --- ## [Onlykey Duo not working with desktop app running Windows 11](https://onlykey.discourse.group/t/onlykey-duo-not-working-with-desktop-app-running-windows-11/1017)
**Author:** [@kstachowiak](https://onlykey.discourse.group/u/kstachowiak)\ **Replies:** 3\ **Last updated:** [July 6, 2023, 3:37pm UTC](https://onlykey.discourse.group/t/onlykey-duo-not-working-with-desktop-app-running-windows-11/1017 "2023-07-06T15:37:43Z")
I bought an Onlykey Duo (USB A+C). I downloaded the desktop app per the setup instructions. I am able to open the desktop app and it immediately asks me to connect my Onlykey. When I insert the USB-A key my ASUS laptop r… --- ## [Can't use stored gpg keys](https://onlykey.discourse.group/t/cant-use-stored-gpg-keys/1078)
**Author:** [@flumm](https://onlykey.discourse.group/u/flumm)\ **Replies:** 4\ **Last updated:** [May 29, 2023, 4:58pm UTC](https://onlykey.discourse.group/t/cant-use-stored-gpg-keys/1078 "2023-05-29T16:58:50Z")
Hi, i can’t use my stored gpg keys. i can upload them fine but when i try to init it i get: # onlykey-gpg init "XXXX \" -sk RSA2 -dk RSA1 -e rsa -i publickey.asc gpg: inserting ownertrust of 6 gpg… --- ## [Simple Explanation for PGP](https://onlykey.discourse.group/t/simple-explanation-for-pgp/1075)
**Author:** [@adam](https://onlykey.discourse.group/u/adam)\ **Replies:** 2\ **Last updated:** [May 1, 2023, 10:27am UTC](https://onlykey.discourse.group/t/simple-explanation-for-pgp/1075 "2023-05-01T10:27:57Z")
HI All, I am struggling to understand the doco. I am new to pgp and looking to use my onlykey for signing my git commits and emails using Thunderbird. I have created a pgp key pair manually using the gpg binary and cop… --- ## [Are PGP keys included in backups?](https://onlykey.discourse.group/t/are-pgp-keys-included-in-backups/1060)
**Author:** [@wildylion](https://onlykey.discourse.group/u/wildylion)\ **Replies:** 1\ **Last updated:** [April 12, 2023, 2:13pm UTC](https://onlykey.discourse.group/t/are-pgp-keys-included-in-backups/1060 "2023-04-12T14:13:05Z")
Hello, Recently, I had to restore my OnlyKey from an (older) backup. It seems like my stored key functionality is no longer working – I had a PGP key there. Is it just me, or does OnlyKey not include stored keys in bac… [Next page](https://onlykey.discourse.group/c/ssh-and-pgp-gpg/11.md?page=1)