WeTheNorth

PGP School · Lesson 5 of 13

What a key fingerprint is and why you compare it

Names on keys can be faked. Fingerprints cannot, in practice.

Keys and fingerprints · updated

1A summary of the key

A fingerprint is a long hash of the public key, usually shown as 40 hexadecimal characters in groups of four.

2Why not the name

Anyone can create a key labelled with any name, including the name of a market. The label proves nothing.

3Why not the short ID

Short key IDs of eight characters can be duplicated deliberately. Always compare the full fingerprint.

4Where to compare

Compare the fingerprint of the key you imported with the one published alongside the wethenorth market onion by several independent references.

Lesson summary

Trust a key by its full fingerprint, never by its name or short ID.

Looking for the current address? See the WeTheNorth link status.