tag:gpgtools.tenderapp.com,2011-11-04:/discussions/problems/44843-laptop-stolen-need-to-upload-my-old-key-on-new-computer-and-be-able-to-encryptdecrypt-same-messagesGPGTools: Discussion 2017-11-13T23:02:02Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-18T16:52:52Z2015-08-18T16:52:52ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>Hi, I really need to be able to use my GPG keychain on my new
computer, in order to encrypt and decrypt the same messages.
However, it doesn't seem like I am able to do so. My laptop was
stolen and I cannot access my account on my new computer. How would
I go about fixing this? Please help.</p></div>Bradtag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-18T17:32:24Z2015-08-18T17:32:24ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>Do you have a backup of the system on your stolen computer?</p></div>Thomas_Utag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-18T17:56:43Z2015-08-18T17:56:44ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>Unfortunately I haven't backed it up because I only had the
software downloaded on my stolen laptop for a week. So I don't know
how to access it now. I have all of the login information and my
passphrase. What should I do now?</p></div>Bradtag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-18T18:10:19Z2015-08-18T18:10:19ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>I guess you´ll have to create GPG keychain from scratch
using the GPG Keychain.app.</p>
<p>You find the Tutorials here: <a href="http://support.gpgtools.org/kb">http://support.gpgtools.org/kb</a></p>
<p>I hope the developer-team will chime in here and help you with
more concise tips (I am just a user).</p>
<p>Do yourself a favor: Buy an external HD and start using
TimeMachine right away to avoid such mishaps in the future.</p></div>Thomas_Utag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-18T18:36:19Z2015-08-18T18:36:21ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>I normally backup my laptop but I only had this software
downloaded for a week. Anyway thanks for the advice. I'll look out
for an admin to see what I can do from here to retrieve my account
on my new computer.</p></div>Bradtag:gpgtools.tenderapp.com,2011-11-04:Comment/376853092015-08-19T12:04:56Z2015-08-19T12:06:20ZLaptop stolen, need to upload my old key on new computer and be able to encrypt/decrypt same messages<div><p>Hey,</p>
<p>@Thomas: thanks for chiming in (as always). Sidenote for you:
please use <a href="https://gpgtools.tenderapp.com/kb">https://gpgtools.tenderapp.com/kb</a>
since we will shut down the other URL in the future.</p>
<p>@Brad: We do have a knowledge base dealing with this case. To
summarize: you just hit a brick wall. You do not have a secret key.
And although GPG Keychain does create a revocation certificate that
safety net does not apply since the revocation certificate which
now would be most useful in order to revoke the lost key resides on
the stolen computer.</p>
<p>So besides you having a bad time alredy, I'd probably freak out
if my laptop was stolen, the key is lost and there is no chance to
revoke it in this situation.</p>
<p>The KB explaining this situation is still worth a read to better
understand the mechanics behind this process: <a href="https://gpgtools.tenderapp.com/kb/gpg-keychain-faq/how-to-revoke-a-key-or-userid-and-can-i-delete-a-key-from-the-key-servers#i-have-lost-access-to-my-secret-key-or-my-passphrase">
https://gpgtools.tenderapp.com/kb/gpg-keychain-faq/how-to-revoke-a-...</a></p>
<p>So much for the bad news. On a brighter note: when I did search
the key servers for your mail address, I was unable to find any key
(at least using the mail you used when you signed up to this
support platform). That means the fact that you can not revoke the
key is not as bad as it was if you would have uploaded your public
key. So if the public key never was on the key servers you will not
be stuck with an unusable but valid key which shows as legit on the
key servers.</p>
<p>Moving on</p>
<p>Now what can you do to get back to a working state? I suggest to
create a new key. Then let your friends know you do have a new key.
You might want to consider uploading to the key servers to make it
easy for others to find your key. Note though, that no keys can be
deleted from the key servers. Keys can only be revoked.</p>
<p>Get your new key signed by some of your friends. Do verify
fingerprints and check that you are both who you claim to be via a
videochat session.</p>
<p>And do create a backup of your key and also backup a revocation
certificate for your key and store both on a thumbdrive you store
in a secure location.</p>
<p>We have a ticket covering better backup options. It would be
great to show a dialog explaining why a backup might be a good
idea, whenever a new key has been created. I connected this
discussion with the existing ticket. That means, should this
discussion get closed, it will be re-opened as soon as the ticket
is closed. That way you'll receive a notification. Feel free to
open a new discussions should you run into further problems or need
assistance.</p>
<p>All the best,<br>
steve</p></div>Steve