Using the program — File Task

Where: File → File Task.

Work on one file at a time. Folders are Folder Task. Explorer right-click is separate.

Tabs

Use them in this order on the window: Encrypt file, Decrypt file, then Sign and encrypt, Decrypt and verify.

Encrypt file

  1. Choose the input file.
  2. Choose the recipient (public key, not expired, not revoked, not a blocked 1024-bit key).
  3. Optional: ASCII armor for a text-style OpenPGP file.
  4. Optional: Armor comment — only used when armor is on; leave blank to omit the Comment header.
  5. Optional: Also encrypt to me (recovery copy) — turn it on and pick the second key (your recovery key). Both keys can decrypt the same output file. It is not a second file on disk. If you leave it off, only the recipient can decrypt.
  6. Encrypt. Save the output. The name is a generated name (not the original filename).

The armored Version header is this product name.

Decrypt file

  1. Open Decrypt file (next to Encrypt file).
  2. Choose the ciphertext.
  3. Enter the key passphrase for a secret key that is a recipient of that file.
  4. Save. The program restores the original file name and extension.

Sign and encrypt

Same as encrypt, plus a signer (secret key, not revoked). Enter the signer’s passphrase. Armor comment and recovery copy work as on Encrypt. Output name is generated.

Decrypt and verify

Opens a signed-and-encrypted file. Enter the recipient passphrase. You get the file back and a signature result: valid or not, which key signed, expired/revoked/altered if the program can tell.

Recovery copy

  • Recipient = who you send the file to (their public key).
  • Recovery = a second public key you choose, usually one of your secret keys in this vault.
  • Preview must list two different keys when recovery is on. If both lines show the same key, pick a different recovery key.
  • To open the file later without the recipient’s secret key, decrypt with your recovery secret key and its passphrase.

If it fails

  • Policy / 1024 — choose another key.
  • Expired or revoked recipient or signer.
  • Wrong passphrase (key, not vault).
  • Decrypt of a file encrypted only to someone else, with recovery off.
  • Armor comment sitting under another control — still type in the comment box if it is on the Encrypt or Sign-and-encrypt tab.

Next

Folder Task for directories. Explorer Encrypt and Decrypt for right-click. Always test decrypt once when you first use recovery.