MacGPG: Sign a file

Maxime's Avatar


06 Apr, 2020 10:07 AM


I looked for an answer on GPG SUITE support, but I didn’t find an appropriate answer to solve my issue.

When I just want to sign a test file it works and it creates a second file.sig. But when I send the original file and file.sig to another email address, I read it and I can see security = null. Then when I double-click on the file.sig the popup window says « verification failed: No signatures found ». So why? Did I miss something?

I expect to have an ultimate trust file.

Additional info
How I proceed to sign a file:

1 right-click on the concern file
2 go to OpenGPG: sign file and click on it
3 I choose the key I want to use
4 Enter Pass-phrase and ok
5 The file is successfully signed and I get a second one in .sig

The other email address, as recipient, I use does not have a GPG system. I do it on purpose, because I want to see how does it looks if one day I want to send one signed to somebody who doesn’t use GPG process.

macOS                   10.15.4     19E266
GPG Suite               2019.2      2724n   (6a3e789d5b)
GPG Mail                4.0         1519n   (ac4a051e1d)    Decrypt Only Mode
GPG Keychain            1.5.1       1610n   (3aab1f595b)
GPG Services            1.12.1      1102n   (ee313ed183)
MacGPG                  2.2.20      942n    (a8c05a09fc)
GPG Suite Preferences   2.2.1       1138n   (378dbebf37)
Libmacgpg               1.0         924n    (42327128f3)
pinentry           46n     (dbee7284fc)
  1. Support Staff 1 Posted by Steve on 08 Apr, 2020 05:10 PM

    Steve's Avatar

    Hi Maxime,

    welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.

    Can you send a screenshot of the received email showing "security = null" please.

    What happens when you drag both the file as well as the files signature file to your desktop and verify from there?


  2. 2 Posted by Maxime on 09 Apr, 2020 09:11 AM

    Maxime's Avatar


    Inside the e-mail, I still can't verify the signature file. But I dragged both files on my desktop, as asked. Then I tried to verify the signature file and it works successfully.

    I attached a file about "security = null".


  3. Support Staff 3 Posted by Steve on 13 Apr, 2020 11:47 AM

    Steve's Avatar

    Thanks for the update. Good to hear that verification with GPG Services works as expected.

    What happens if you attach the docx file and use GPG Mail to sign the file?

  4. 4 Posted by Maxime on 13 Apr, 2020 12:09 PM

    Maxime's Avatar

    As I said in another exchange, I can't use GPG Mail. I don't have buttons "star" to sign and "lock" to encrypt e-mail. I don't know why. I have to do it manually (right click > service etc...). And as I said, when I encrypt manually an e-mail with an attachment, the attachment is not longer in the e-mail at the decryption process. It's like the attachment is gone, deleted, erased or what ever, but it's not in the e-mail anymore.


  5. Support Staff 5 Posted by Steve on 13 Apr, 2020 12:53 PM

    Steve's Avatar

    You can use GPG Mail in trail mode for 30 days and then decide if you want to purchase GPG Mail Support Plan.

    Once the trial expired you will be in Decrypt Only Mode. You will always be able to decrypt encrypted messages. Encryption and signing of new message as well as verification of signatures will no longer be supported.

    So this explains why the verification is not automatically happening in GPG Mail.

    See also

  6. Steve closed this discussion on 15 Jul, 2020 05:09 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts


? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac