About GPG

For GPG basic concepts, check out this blog post on Median, which well explained what GPG is and the basic practice is about it.

Sign Content

Here we use Kleopatra on Windows to demonstrate how to sign content using its Notepad feature.

As shown above:

1. Choose the right key you want to use
2. Check Sign as, uncheck Encrypt
3. Go back to “Notepad”, enter the content, then click “Sign Notepad” at the top

Sign Commit Using Git

Set Up GPG Sign for Git Commit

// check keys
gpg --list-keys

// set git username and email (optional)
git config user.name "name here"
git config user.email "test.email"

// choose the key to use, enable signing
git config user.signingkey KEY_FINGER
git config commit.gpgsign true

After these steps, git will now sign your commit with specified key.

More About Git Config

To check a specific config, use --get. To set global config instead of repo-wise, use --global:

// check configs
git config --get user.name

// set global configs
git config --global

For more info about git config, checkout official doc.