-s, --sign | make a signature | help |
--clear-sign | make a clear text signature | help |
-b, --detach-sign | make a detached signature | help |
-e, --encrypt | encrypt data | help |
-c, --symmetric | encryption only with symmetric cipher | help |
-d, --decrypt | decrypt data (default) | help |
--verify | verify a signature | help |
-k, --list-keys | list keys | help |
--list-signatures | list keys and signatures | help + man |
--check-signatures | list and check key signatures | help |
--fingerprint | list keys and fingerprints | help |
-K, --list-secret-keys | list secret keys | help |
--generate-key | generate a new key pair | help |
--quick-generate-key | quickly generate a new key pair | help |
--quick-add-uid | quickly add a new user-id | help |
--quick-revoke-uid | quickly revoke a user-id | help |
--quick-set-expire | quickly set a new expiration date | help |
--full-generate-key | full featured key pair generation | help |
--generate-revocation | generate a revocation certificate | help |
--delete-keys | remove keys from the public keyring | help |
--delete-secret-keys | remove keys from the secret keyring | help |
--quick-sign-key | quickly sign a key | help |
--quick-lsign-key | quickly sign a key locally | help |
--quick-revoke-sig | quickly revoke a key signature | help |
--sign-key | sign a key | help |
--lsign-key | sign a key locally | help |
--edit-key | sign or edit a key | help |
--change-passphrase | change a passphrase | help |
--export | export keys | help |
--send-keys | export keys to a keyserver | help |
--receive-keys | import keys from a keyserver | help |
--search-keys | search for keys on a keyserver | help |
--refresh-keys | update all keys from a keyserver | help |
--import | import/merge keys | help |
--card-status | print the card status | help |
--edit-card | change data on a card | help |
--change-pin | change a card's PIN | help |
--update-trustdb | update the trust database | help |
--print-md | print message digests | help |
--server | run in server mode | help |
--tofu-policy VALUE | set the TOFU policy for a key | help |
-v, --verbose | Give more information during processing. | help + man |
-q, --quiet | Try to be as quiet as possible. | help + man |
--options FILE | Read options from file and do not try to read them from the default options file in the homedir (see --homedir). | help + man |
--log-file FILE | write server mode logs to FILE | help + man |
--default-key NAME | Use name as the default key to sign with. | help + man |
--encrypt-to NAME | Same as --recipient but this one is intended for use in the options file and may be used with your own user-id as an "encrypt-to-self". | help + man |
--group SPEC | Sets up a named group, which is similar to aliases in email programs. | help + man |
--openpgp | Set all packet, cipher and digest options to OpenPGP compatible (RFC-9580) behavior. | help + man |
-n, --dry-run | Don't make any changes (this is not completely implemented). | help + man + man |
-i, --interactive | Prompt before overwriting any files. | help + man + man |
-a, --armor | Create ASCII armored output. | help + man + man |
-o, --output FILE | Write output to file. | help + man + man |
-z N | set compress level to N (0 disables) | help + man |
--auto-key-locate MECHANISMS | use MECHANISMS to locate keys by mail address | help + man |
--auto-key-import | import missing key from a signature | help + man |
--include-key-block | include the public key in signatures | help + man |
--disable-dirmngr | Entirely disable the use of the Dirmngr. | help + man |
-r, --recipient USER-ID | Encrypt for user id name. | help + man + man |
-u, --local-user USER-ID | Use name as the key to sign with. | help + man + man |
-se -r | sign and encrypt for user Bob | help |
--default-recipient name | Use name as default recipient if option --recipient is not used and don't ask if this is a valid one. (in the manual page but not in --help) | man |
--default-recipient-self | Use the default key as default recipient if option --recipient is not used and don't ask if this is a valid one. (in the manual page but not in --help) | man |
--no-default-recipient | Reset --default-recipient and --default-recipient-self. (in the manual page but not in --help) | man |
--no-verbose | Reset verbose level to 0. (in the manual page but not in --help) | man |
--batch | (in the manual page but not in --help) | man |
--no-batch | Use batch mode. (in the manual page but not in --help) | man |
--no-tty | Make sure that the TTY (terminal) is never used for any output. (in the manual page but not in --help) | man |
--yes | Assume "yes" on most questions. (in the manual page but not in --help) | man |
--no | Assume "no" on most questions. (in the manual page but not in --help) | man |
--proc-all-sigs | This option overrides the behaviour of the --batch option to stop signature verification at the first bad signatures. (in the manual page but not in --help) | man |
--list-filter select=expr | A list filter can be used to output only certain keys during key listing commands. (in the manual page but not in --help) | man |
--list-options parameters | This is a space or comma delimited string that gives options used when listing keys and signatures (that is, --list-keys, --check-signatures, --list-public-keys, --list-secret-keys, and the… (in the manual page but not in --help) | man |
--verify-options parameters | This is a space or comma delimited string that gives options used when verifying signatures. (in the manual page but not in --help) | man |
--enable-large-rsa | (in the manual page but not in --help) | man |
--disable-large-rsa | Enable the creation of RSA secret keys as large as 8192 bit. (in the manual page but not in --help) | man |
--enable-dsa2 | (in the manual page but not in --help) | man |
--disable-dsa2 | Enable hash truncation for all DSA keys even for old DSA Keys up to 1024 bit. (in the manual page but not in --help) | man |
--photo-viewer string | This is the command line that should be run to view a photo ID. (in the manual page but not in --help) | man |
--exec-path string | Sets a list of directories to search for photo viewers If not provided photo viewers use the PATH environment variable. (in the manual page but not in --help) | man |
--keyring file | Add file to the current list of keyrings. (in the manual page but not in --help) | man |
--primary-keyring file | This is a varian of --keyring and designates file as the primary public keyring. (in the manual page but not in --help) | man |
--secret-keyring file | This is an obsolete option and ignored. (in the manual page but not in --help) | man |
--trustdb-name file | Use file instead of the default trustdb. (in the manual page but not in --help) | man |
--homedir dir | Set the name of the home directory to dir. (in the manual page but not in --help) | man |
--display-charset name | Set the name of the native character set. (in the manual page but not in --help) | man |
--utf8-strings | (in the manual page but not in --help) | man |
--no-utf8-strings | Assume that command line arguments are given as UTF-8 strings. (in the manual page but not in --help) | man |
--no-options | Shortcut for --options /dev/null. (in the manual page but not in --help) | man |
--compress-level n | (in the manual page but not in --help) | man |
--bzip2-compress-level n | (in the manual page but not in --help) | man |
--no-compress | Set compression level to n for the ZIP and ZLIB compression algorithms. (in the manual page but not in --help) | man |
--bzip2-decompress-lowmem | Use a different decompression method for BZIP2 compressed files. (in the manual page but not in --help) | man |
--mangle-dos-filenames | (in the manual page but not in --help) | man |
--no-mangle-dos-filenames | Older version of Windows cannot handle filenames with more than one dot. (in the manual page but not in --help) | man |
--ask-cert-level | (in the manual page but not in --help) | man |
--no-ask-cert-level | When making a key signature, prompt for a certification level. (in the manual page but not in --help) | man |
--default-cert-level n | The default to use for the check level when signing a key. (in the manual page but not in --help) | man |
--min-cert-level | When building the trust database, treat any signatures with a certification level below this as invalid. (in the manual page but not in --help) | man |
--trusted-key long | Assume that the specified key (which should be given as fingerprint) is as trustworthy as one of your own secret keys. (in the manual page but not in --help) | man |
--default-new-key-adsk fingerprint | Add the subkey specified by fingerprint as an Additional Decryption Subkey (ADSK) to newly created keys. (in the manual page but not in --help) | man |
--trust-model | Set what trust model GnuPG should follow. (in the manual page but not in --help) | man |
--always-trust | Identical to --trust-model always. (in the manual page but not in --help) | man |
--assert-signer fpr_or_file | This option checks whether at least one valid signature on a file has been made with the specified key. (in the manual page but not in --help) | man |
--assert-pubkey-algo algolist | During data signature verification this options checks whether the used public key algorithm matches the algorithms given by algolist. (in the manual page but not in --help) | man |
--no-auto-key-locate | GnuPG can automatically locate and retrieve keys as needed using this option. (in the manual page but not in --help) | man |
--no-auto-key-import | This is an offline mechanism to get a missing key for signature verification and for later encryption to this key. (in the manual page but not in --help) | man |
--auto-key-retrieve | (in the manual page but not in --help) | man |
--no-auto-key-retrieve | These options enable or disable the automatic retrieving of keys from a keyserver when verifying signatures made by keys that are not on the local keyring. (in the manual page but not in --help) | man |
--keyid-format none|short|0xshort|long|0xlong | Select how to display key IDs. (in the manual page but not in --help) | man |
--keyserver name | This option is deprecated - please use the --keyserver in ‘dirmngr.conf’ instead. (in the manual page but not in --help) | man |
--keyserver-options name=value | This is a space or comma delimited string that gives options for the keyserver. (in the manual page but not in --help) | man |
--completes-needed n | Number of completely trusted users to introduce a new key signer (defaults to 1). (in the manual page but not in --help) | man |
--marginals-needed n | Number of marginally trusted users to introduce a new key signer (defaults to 3) (in the manual page but not in --help) | man |
--tofu-default-policy auto|good|unknown|bad|ask | The default TOFU policy (defaults to auto). (in the manual page but not in --help) | man |
--max-cert-depth n | Maximum depth of a certification chain (default is 5). (in the manual page but not in --help) | man |
--no-sig-cache | Do not cache the verification status of key signatures. (in the manual page but not in --help) | man |
--auto-check-trustdb | (in the manual page but not in --help) | man |
--no-auto-check-trustdb | If GnuPG feels that its information about the Web of Trust has to be updated, it automatically runs the --check-trustdb command internally. (in the manual page but not in --help) | man |
--use-agent | (in the manual page but not in --help) | man |
--no-use-agent | This is dummy option. (in the manual page but not in --help) | man |
--gpg-agent-info | This is dummy option. (in the manual page but not in --help) | man |
--agent-program file | Specify an agent program to be used for secret key operations. (in the manual page but not in --help) | man |
--dirmngr-program file | Specify a dirmngr program to be used for keyserver access. (in the manual page but not in --help) | man |
--no-autostart | Do not start the gpg-agent or the dirmngr if it has not yet been started and its service is required. (in the manual page but not in --help) | man |
--lock-once | Lock the databases the first time a lock is requested and do not release the lock until the process terminates. (in the manual page but not in --help) | man |
--lock-multiple | Release the locks every time a lock is no longer needed. (in the manual page but not in --help) | man |
--lock-never | Disable locking entirely. (in the manual page but not in --help) | man |
--exit-on-status-write-error | This option will cause write errors on the status FD to immediately terminate the process. (in the manual page but not in --help) | man |
--limit-card-insert-tries n | With n greater than 0 the number of prompts asking to insert a smartcard gets limited to N-1. (in the manual page but not in --help) | man |
--no-random-seed-file | GnuPG uses a file to store its internal random pool over invocations. (in the manual page but not in --help) | man |
--no-greeting | Suppress the initial copyright message. (in the manual page but not in --help) | man |
--no-secmem-warning | Suppress the warning about "using insecure memory". (in the manual page but not in --help) | man |
--no-permission-warning | Suppress the warning about unsafe file and home directory (--homedir) permissions. (in the manual page but not in --help) | man |
--require-secmem | (in the manual page but not in --help) | man |
--no-require-secmem | Refuse to run if GnuPG cannot get secure memory. (in the manual page but not in --help) | man |
--require-cross-certification | (in the manual page but not in --help) | man |
--no-require-cross-certification | When verifying a signature made from a subkey, ensure that the cross certification "back signature" on the subkey is present and valid. (in the manual page but not in --help) | man |
--expert | (in the manual page but not in --help) | man |
--no-expert | Allow the user to do certain nonsensical or "silly" things like signing an expired or revoked key, or certain potentially incompatible things like generating unusual key types. (in the manual page but not in --help) | man |
--hidden-recipient name | (in the manual page but not in --help) | man |
-R | Encrypt for user ID name, but hide the key ID of this user's key. (in the manual page but not in --help) | man |
--recipient-file file | (in the manual page but not in --help) | man |
-f | This option is similar to --recipient except that it encrypts to a key stored in the given file. (in the manual page but not in --help) | man |
--hidden-recipient-file file | (in the manual page but not in --help) | man |
-F | This option is similar to --hidden-recipient except that it encrypts to a key stored in the given file. (in the manual page but not in --help) | man |
--hidden-encrypt-to name | Same as --hidden-recipient but this one is intended for use in the options file and may be used with your own user-id as a hidden "encrypt-to-self". (in the manual page but not in --help) | man |
--no-encrypt-to | Disable the use of all --encrypt-to and --hidden-encrypt-to keys. (in the manual page but not in --help) | man |
--ungroup name | Remove a given entry from the --group list. (in the manual page but not in --help) | man |
--no-groups | Remove all entries from the --group list. (in the manual page but not in --help) | man |
--sender mbox | This option has two purposes. (in the manual page but not in --help) | man |
--try-secret-key name | For hidden recipients GPG needs to know the keys to use for trial decryption. (in the manual page but not in --help) | man |
--try-all-secrets | Don't look at the key ID as stored in the message but try all secret keys in turn to find the right decryption key. (in the manual page but not in --help) | man |
--skip-hidden-recipients | (in the manual page but not in --help) | man |
--no-skip-hidden-recipients | During decryption skip all anonymous recipients. (in the manual page but not in --help) | man |
--no-armor | Assume the input data is not in ASCII armored format. (in the manual page but not in --help) | man |
--max-output n | This option sets a limit on the number of bytes that will be generated when processing a file. (in the manual page but not in --help) | man |
--chunk-size n | The AEAD encryption mode encrypts the data in chunks so that a receiving side can check for transmission errors or tampering at the end of each chunk and does not need to delay this until all data… (in the manual page but not in --help) | man |
--input-size-hint n | This option can be used to tell GPG the size of the input data in bytes. (in the manual page but not in --help) | man |
--import-options parameters | This is a space or comma delimited string that gives options for importing keys. (in the manual page but not in --help) | man |
--import-filter name=expr | (in the manual page but not in --help) | man |
--export-filter name=expr | These options define an import/export filter which are applied to the imported/exported keyblock right before it will be stored/written. (in the manual page but not in --help) | man |
--export-options parameters | This is a space or comma delimited string that gives options for exporting keys. (in the manual page but not in --help) | man |
--with-colons | Print key listings delimited by colons. (in the manual page but not in --help) | man |
--fixed-list-mode | Do not merge primary user ID and primary key in --with-colon listing mode and print all timestamps as seconds since 1970-01-01. (in the manual page but not in --help) | man |
--legacy-list-mode | Revert to the pre-2.1 public key list mode. (in the manual page but not in --help) | man |
--with-fingerprint | Same as the command --fingerprint but changes only the format of the output and may be used together with another command. (in the manual page but not in --help) | man |
--with-subkey-fingerprint | If a fingerprint is printed for the primary key, this option forces printing of the fingerprint for all subkeys. (in the manual page but not in --help) | man |
--with-v5-fingerprint | In a colon mode listing emit "fp2" lines for version 4 OpenPGP keys having a v5 style fingerprint of the key. (in the manual page but not in --help) | man |
--with-icao-spelling | Print the ICAO spelling of the fingerprint in addition to the hex digits. (in the manual page but not in --help) | man |
--with-keygrip | Include the keygrip in the key listings. (in the manual page but not in --help) | man |
--with-key-origin | Include the locally held information on the origin and last update of a key in a key listing. (in the manual page but not in --help) | man |
--with-wkd-hash | Print a Web Key Directory identifier along with each user ID in key listings. (in the manual page but not in --help) | man |
--with-secret | Include info about the presence of a secret key in public key listings done with --with-colons. (in the manual page but not in --help) | man |
--force-ocb | (in the manual page but not in --help) | man |
--force-aead | Force the use of AEAD encryption over MDC encryption. (in the manual page but not in --help) | man |
--force-mdc | (in the manual page but not in --help) | man |
--disable-mdc | These options are obsolete and have no effect since GnuPG 2.2.8. (in the manual page but not in --help) | man |
--disable-signer-uid | By default the user ID of the signing key is embedded in the data signature. (in the manual page but not in --help) | man |
--no-include-key-block | This option is used to embed the actual signing key into a data signature. (in the manual page but not in --help) | man |
--personal-cipher-preferences string | Set the list of personal cipher preferences to string. (in the manual page but not in --help) | man |
--personal-digest-preferences string | Set the list of personal digest preferences to string. (in the manual page but not in --help) | man |
--personal-compress-preferences string | Set the list of personal compression preferences to string. (in the manual page but not in --help) | man |
--s2k-cipher-algo name | Use name as the cipher algorithm for symmetric encryption with a passphrase if --personal-cipher-preferences and --cipher-algo are not given. (in the manual page but not in --help) | man |
--s2k-digest-algo name | Use name as the digest algorithm used to mangle the passphrases for symmetric encryption. (in the manual page but not in --help) | man |
--s2k-mode n | Selects how passphrases for symmetric encryption are mangled. (in the manual page but not in --help) | man |
--s2k-count n | Specify how many times the passphrases mangling for symmetric encryption is repeated. (in the manual page but not in --help) | man |
--gnupg | Use standard GnuPG behavior. (in the manual page but not in --help) | man |
--rfc4880 | Set all packet, cipher and digest options to strict RFC-4880 behavior. (in the manual page but not in --help) | man |
--rfc4880bis | This option is obsolete; (in the manual page but not in --help) | man |
--rfc2440 | Set all packet, cipher and digest options to strict RFC-2440 behavior. (in the manual page but not in --help) | man |
--pgp6 | This option is obsolete; (in the manual page but not in --help) | man |
--pgp7 | Set up all options to be as PGP 7 compliant as possible. (in the manual page but not in --help) | man |
--pgp8 | Set up all options to be as PGP 8 compliant as possible. (in the manual page but not in --help) | man |
--compliance string | This option can be used instead of one of the options above. (in the manual page but not in --help) | man |
--min-rsa-length n | This option adjusts the compliance mode "de-vs" for stricter key size requirements. (in the manual page but not in --help) | man |
--require-compliance | To check that data has been encrypted according to the rules of the current compliance mode, a gpg user needs to evaluate the status lines. (in the manual page but not in --help) | man |
--list-only | Changes the behaviour of some commands. (in the manual page but not in --help) | man |
--compatibility-flags flags | Set compatibility flags to work around problems due to non-compliant keys or data. (in the manual page but not in --help) | man |
--debug-level level | Select the debug level for investigating problems. (in the manual page but not in --help) | man |
--debug flags | Set debug flags. (in the manual page but not in --help) | man |
--debug-all | Set all useful debugging flags. (in the manual page but not in --help) | man |
--debug-iolbf | Set stdout into line buffered mode. (in the manual page but not in --help) | man |
--debug-set-iobuf-size n | Change the buffer size of the IOBUFs to n kilobyte. (in the manual page but not in --help) | man |
--debug-allow-large-chunks | To facilitate software tests and experiments this option allows one to specify a limit of up to 4 EiB (--chunk-size 62). (in the manual page but not in --help) | man |
--debug-ignore-expiration | This option tries to override certain key expiration dates. (in the manual page but not in --help) | man |
--faked-system-time epoch | This option is only useful for testing; (in the manual page but not in --help) | man |
--full-timestrings | Change the format of printed creation and expiration times from just the date to the date and time. (in the manual page but not in --help) | man |
--enable-progress-filter | Enable certain PROGRESS status outputs. (in the manual page but not in --help) | man |
--status-fd n | Write special status strings to the file descriptor n. (in the manual page but not in --help) | man |
--status-file file | Same as --status-fd, except the status data is written to file file. (in the manual page but not in --help) | man |
--logger-fd n | Write log output to file descriptor n and not to STDERR. (in the manual page but not in --help) | man |
--logger-file file | Same as --logger-fd, except the logger data is written to file file. (in the manual page but not in --help) | man |
--log-time | Prefix all log output with a timestamp even if no log file is used. (in the manual page but not in --help) | man |
--attribute-fd n | Write attribute subpackets to the file descriptor n. (in the manual page but not in --help) | man |
--attribute-file file | Same as --attribute-fd, except the attribute data is written to file file. (in the manual page but not in --help) | man |
--comment string | (in the manual page but not in --help) | man |
--no-comments | Use string as a comment string in cleartext signatures and ASCII armored messages or keys (see --armor). (in the manual page but not in --help) | man |
--emit-version | (in the manual page but not in --help) | man |
--no-emit-version | Force inclusion of the version string in ASCII armored output. (in the manual page but not in --help) | man |
--sig-notation name=value | (in the manual page but not in --help) | man |
--cert-notation name=value | (in the manual page but not in --help) | man |
-N, --set-notation name=value | Put the name value pair into the signature as notation data. (in the manual page but not in --help) | man |
--known-notation name | Adds name to a list of known critical signature notations. (in the manual page but not in --help) | man |
--sig-policy-url string | (in the manual page but not in --help) | man |
--cert-policy-url string | (in the manual page but not in --help) | man |
--set-policy-url string | Use string as a Policy URL for signatures (rfc4880:5.2.3.20). (in the manual page but not in --help) | man |
--sig-keyserver-url string | Use string as a preferred keyserver URL for data signatures. (in the manual page but not in --help) | man |
--set-filename string | Use string as the filename which is stored inside messages. (in the manual page but not in --help) | man |
--for-your-eyes-only | (in the manual page but not in --help) | man |
--no-for-your-eyes-only | Set the for your eyes only' flag in the message. (in the manual page but not in --help) | man |
--use-embedded-filename | (in the manual page but not in --help) | man |
--no-use-embedded-filename | Try to create a file with a name as embedded in the data. (in the manual page but not in --help) | man |
--cipher-algo name | Use name as cipher algorithm. (in the manual page but not in --help) | man |
--digest-algo name | Use name as the message digest algorithm. (in the manual page but not in --help) | man |
--compress-algo name | Use compression algorithm name. (in the manual page but not in --help) | man |
--cert-digest-algo name | Use name as the message digest algorithm used when signing a key. (in the manual page but not in --help) | man |
--disable-cipher-algo name | Never allow the use of name as cipher algorithm. (in the manual page but not in --help) | man |
--disable-pubkey-algo name | Never allow the use of name as public key algorithm. (in the manual page but not in --help) | man |
--throw-keyids | (in the manual page but not in --help) | man |
--no-throw-keyids | Do not put the recipient key IDs into encrypted messages. (in the manual page but not in --help) | man |
--not-dash-escaped | This option changes the behavior of cleartext signatures so that they can be used for patch files. (in the manual page but not in --help) | man |
--escape-from-lines | (in the manual page but not in --help) | man |
--no-escape-from-lines | Because some mailers change lines starting with "From " to ">From " it is good to handle such lines in a special way when creating cleartext signatures to prevent the mail system from breaking the… (in the manual page but not in --help) | man |
--passphrase-repeat n | Specify how many times gpg will request a new passphrase be repeated. (in the manual page but not in --help) | man |
--passphrase-fd n | Read the passphrase from file descriptor n. (in the manual page but not in --help) | man |
--passphrase-file file | Read the passphrase from file file. (in the manual page but not in --help) | man |
--passphrase string | Use string as the passphrase. (in the manual page but not in --help) | man |
--pinentry-mode mode | Set the pinentry mode to mode. (in the manual page but not in --help) | man |
--no-symkey-cache | Disable the passphrase cache used for symmetrical en- and decryption. (in the manual page but not in --help) | man |
--request-origin origin | Tell gpg to assume that the operation ultimately originated at origin. (in the manual page but not in --help) | man |
--command-fd n | This is a replacement for the deprecated shared-memory IPC mode. (in the manual page but not in --help) | man |
--command-file file | Same as --command-fd, except the commands are read out of file file (in the manual page but not in --help) | man |
--allow-non-selfsigned-uid | (in the manual page but not in --help) | man |
--no-allow-non-selfsigned-uid | Allow the import and use of keys with user IDs which are not self-signed. (in the manual page but not in --help) | man |
--allow-freeform-uid | Disable all checks on the form of the user ID while generating a new one. (in the manual page but not in --help) | man |
--ignore-time-conflict | GnuPG normally checks that the timestamps associated with keys and signatures have plausible values. (in the manual page but not in --help) | man |
--ignore-valid-from | GnuPG normally does not select and use subkeys created in the future. (in the manual page but not in --help) | man |
--ignore-crc-error | The ASCII armor used by OpenPGP is protected by a CRC checksum against transmission errors. (in the manual page but not in --help) | man |
--ignore-mdc-error | This option changes a MDC integrity protection failure into a warning. (in the manual page but not in --help) | man |
--allow-old-cipher-algos | Old cipher algorithms like 3DES, IDEA, or CAST5 encrypt data using blocks of 64 bits; (in the manual page but not in --help) | man |
--allow-weak-digest-algos | Signatures made with known-weak digest algorithms are normally rejected with an invalid digest algorithm'' message. (in the manual page but not in --help) | man |
--weak-digest name | Treat the specified digest algorithm as weak. (in the manual page but not in --help) | man |
--allow-weak-key-signatures | To avoid a minor risk of collision attacks on third-party key signatures made using SHA-1, those key signatures are considered invalid. (in the manual page but not in --help) | man |
--override-compliance-check | This was a temporary introduced option and has no more effect. (in the manual page but not in --help) | man |
--no-default-keyring | Do not add the default keyring to the list of keyrings. (in the manual page but not in --help) | man |
--no-keyring | Do not use any keyring at all. (in the manual page but not in --help) | man |
--skip-verify | Skip the signature verification step. (in the manual page but not in --help) | man |
--with-key-data | Print key listings delimited by colons (like --with-colons) and print the public key data. (in the manual page but not in --help) | man |
--list-sigs | Same as --list-keys, but the signatures are listed too. (in the manual page but not in --help) | man |
--fast-list-mode | Changes the output of the list commands to work faster; (in the manual page but not in --help) | man |
--no-literal | This is not for normal use. (in the manual page but not in --help) | man |
--set-filesize | This is not for normal use. (in the manual page but not in --help) | man |
--show-session-key | Display the session key used for one message. (in the manual page but not in --help) | man |
--override-session-key string | (in the manual page but not in --help) | man |
--override-session-key-fd fd | Don't use the public key but the session key string respective the session key taken from the first line read from file descriptor fd. (in the manual page but not in --help) | man |
--ask-sig-expire | (in the manual page but not in --help) | man |
--no-ask-sig-expire | When making a data signature, prompt for an expiration time. (in the manual page but not in --help) | man |
--default-sig-expire | The default expiration time to use for signature expiration. (in the manual page but not in --help) | man |
--ask-cert-expire | (in the manual page but not in --help) | man |
--no-ask-cert-expire | When making a key signature, prompt for an expiration time. (in the manual page but not in --help) | man |
--default-cert-expire | The default expiration time to use for key signature expiration. (in the manual page but not in --help) | man |
--default-new-key-algo string | This option can be used to change the default algorithms for key generation. (in the manual page but not in --help) | man |
--no-auto-trust-new-key | When creating a new key the ownertrust of the new key is set to ultimate. (in the manual page but not in --help) | man |
--force-sign-key | This option modifies the behaviour of the commands --quick-sign-key, --quick-lsign-key, and the "sign" sub-commands of --edit-key by forcing the creation of a key signature, even if one already… (in the manual page but not in --help) | man |
--forbid-gen-key | This option is intended for use in the global config file to disallow the use of generate key commands. (in the manual page but not in --help) | man |
--allow-secret-key-import | This is an obsolete option and is not used anywhere. (in the manual page but not in --help) | man |
--allow-multiple-messages | (in the manual page but not in --help) | man |
--no-allow-multiple-messages | These are obsolete options; (in the manual page but not in --help) | man |
--enable-special-filenames | This option enables a mode in which filenames of the form ‘-&n’, where n is a non-negative decimal number, refer to the file descriptor n and not to a file with that name. (in the manual page but not in --help) | man |
--no-expensive-trust-checks | Experimental use only. (in the manual page but not in --help) | man |
--preserve-permissions | Don't change the permissions of a secret keyring back to user read/write only. (in the manual page but not in --help) | man |
--default-preference-list string | Set the list of default preferences to string. (in the manual page but not in --help) | man |
--default-keyserver-url name | Set the default keyserver URL to name. (in the manual page but not in --help) | man |
--list-config | Display various internal configuration parameters of GnuPG. (in the manual page but not in --help) | man |
--list-gcrypt-config | Display various internal configuration parameters of Libgcrypt. (in the manual page but not in --help) | man |
--gpgconf-list | This command is similar to --list-config but in general only internally used by the gpgconf tool. (in the manual page but not in --help) | man |
--gpgconf-test | This is more or less dummy action. (in the manual page but not in --help) | man |
--chuid uid | Change the current user to uid which may either be a number or a name. (in the manual page but not in --help) | man |
-t, --textmode | (in the manual page but not in --help) | man |
--no-textmode | Treat input files as text and store them in the OpenPGP canonical text form with standard "CRLF" line endings. (in the manual page but not in --help) | man |
--force-v3-sigs | (in the manual page but not in --help) | man |
--no-force-v3-sigs | (in the manual page but not in --help) | man |
--force-v4-certs | (in the manual page but not in --help) | man |
--no-force-v4-certs | These options are obsolete and have no effect since GnuPG 2.1. (in the manual page but not in --help) | man |
--show-photos | (in the manual page but not in --help) | man |
--no-show-photos | Causes --list-keys, --list-signatures, --list-public-keys, --list-secret-keys, and verifying a signature to also display the photo ID attached to the key, if any. (in the manual page but not in --help) | man |
--show-keyring | Display the keyring name at the head of key listings to show which keyring a given key resides on. (in the manual page but not in --help) | man |
--show-notation | (in the manual page but not in --help) | man |
--no-show-notation | Show signature notations in the --list-signatures or --check-signatures listings as well as when verifying a signature with a notation in it. (in the manual page but not in --help) | man |
--show-policy-url | (in the manual page but not in --help) | man |
--no-show-policy-url | Show policy URLs in the --list-signatures or --check-signatures listings as well as when verifying a signature with a policy URL in it. (in the manual page but not in --help) | man |
--personal-aead-preferences string | This option is deprecated and has no more effect since version 2.3.9. (in the manual page but not in --help) | man |
--aead-algo name | This option is deprecated and has no more effect since version 2.3.9. (in the manual page but not in --help) | man |