This guide will walk you through the entire process of setting up GPG for signing your GitHub commits on Windows.
To get started with GPG, you’ll need to install GPG4Win, which is the suite that includes everything you need to generate your keys.
Once you've installed Git Bash, open it up. Now, you're ready to go!
Run the following command in Git Bash to create your GPG key.
Next, export the public key to add it to GitHub.
Then, configure Git to automatically sign your commits by default.
If you’re getting the GPG key to work locally but don’t see the 'Verified' label on GitHub, there’s a chance the problem lies in how you're using the terminal.
This error usually means Git can’t find your GPG private key for signing commits.
Setting up GPG on Windows for GitHub commit signing can be a bit tricky, but once you’ve got everything in place, it’s totally worth it to see that “Verified” label next to your commits.
If you're running into GPG errors or issues with secret keys, double-check your paths and keys, and you should be good to go!