A couple days ago, I saw an email from Keybase saying that someone I know started tracking me. So I typed the command to do the same and… realized I don’t remember my GPG passphrase. I’ve been using it mostly for signing git tags, but I haven’t done that in a couple months.

Brute force with rephrase and even John the Ripper didn’t help. Found the revocation certificate, printed on paper. OCR’d, fixed the text, typed it manually – β€œBad signature”.

Today, I needed to actually sign a git tag. Guess what. I remembered the passphrase! :D


Categories and tags

Posts Notes #gpg

Posted using


Post your response

If you write a response on your website, mark it up with h-entry and let me know the URL: