In GitLab go to your profile settings, then click GPG Keys on the left hand menu. To make commits appear as verified in GitLab, first make sure that the signing certificate set up with git has the same email address as your GitLab account. In GitHub go to your profile settings, then click SSH and GPG Keys on the left hand menu.Ĭlick New GPG key, paste your key in and click Add GPG key.Īny signed commits will now appear as verified. Copy the exported public key to the clipboard. Open Kleopatra, right click on your GPG certificate and select Details. To make commits appear as verified in GitHub, first make sure that the signing certificate set up with git has the same email address as your GitHub account. Open PowerShell (or a command prompt) and list your GPG keys by running: Once your keys have been generated you can back them up to a secure location. You can also configure an expiry date (by default there is none).Ĭlick Next, and then click Create Key Pair. Optionally click Advanced Settings and select a different key type from the list (the default is RSA 2048 bit). If you want to verify your commits on GitHub or GitLab, make sure to use the same email address as the one on your account. Select Create a personal OpenPGP key pairĮnter your name and email address into the fields. Download and install it, making sure ‘Kleopatra’ (the GPG key manager) is selected as a component to install. The easiest way to create and manage GPG keys is with GPG4Win. How to create a GPG key, configure git to use it, and how to set up GitHub and GitLab so your commits appear as verified. How to set up signing commits and tags with git on Windows

Verify gpgwin windows