Security Guide
PGP Encryption Tutorial for Mars Market 2025
Last updated: November 2025 | Reading time: 12 minutes
Last updated: November 2025 | Reading time: 12 minutes
PGP (Pretty Good Privacy) is a data encryption program that provides cryptographic privacy and authentication for data communication. When you encrypt a message with PGP, only the intended recipient can decrypt and read it—even if the message is intercepted, it remains unreadable to anyone without the private key.
PGP uses a combination of symmetric-key cryptography and public-key cryptography. Each user has a key pair: a public key that can be shared freely and a private key that must be kept secret. Messages encrypted with someone's public key can only be decrypted with their corresponding private key.
On Mars Market, PGP encryption serves several critical purposes:
GPG (GNU Privacy Guard) is the free, open-source implementation of PGP. Choose the version for your operating system:
Most Linux distributions include GnuPG by default. If not installed:
# Debian/Ubuntu
sudo apt install gnupg
# Fedora
sudo dnf install gnupg2
# Arch
sudo pacman -S gnupgFollow these steps to generate a new PGP key pair specifically for Mars Market:
In Kleopatra (Windows) or GPG Keychain (Mac), click "New Key Pair" or "New". On Linux command line, run: gpg --full-generate-key
Choose "RSA and RSA" for the key type. This creates both an encryption key and a signing key.
Select 4096 bits for maximum security. This is the strongest commonly available option.
Choose an expiration date or set no expiration. A 1-2 year expiration adds security but requires key renewal.
Enter a pseudonym (NOT your real name) and a anonymous email address (or leave email blank). This information is public.
Enter a strong passphrase to protect your private key. Use at least 20 characters or a random passphrase of 5+ words. Remember this passphrase!
To share your public key, you need to export it in ASCII armored format:
gpg --armor --export your@email.comYour public key will look something like this:
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGVk1a0BEADF2r8q...
[many lines of characters]
...xYz123==
=AbCd
-----END PGP PUBLIC KEY BLOCK-----Copy this entire block (including the BEGIN and END lines) and paste it into your Mars Market profile settings.
Before you can send encrypted messages to a vendor, you need to import their public key:
# From clipboard (paste key, then Ctrl+D)
gpg --import
# From file
gpg --import vendor_key.ascAlways encrypt sensitive information before sending to vendors:
# Encrypt for specific recipient
echo "Your message here" | gpg --armor --encrypt --recipient vendor@key.id
# Or encrypt a file
gpg --armor --encrypt --recipient vendor@key.id message.txtThe encrypted message looks like:
-----BEGIN PGP MESSAGE-----
hQIMA3R5/FbG8OqSAQ/9F...
[encrypted content]
...Xyz==
=AbC1
-----END PGP MESSAGE-----To read encrypted messages sent to you:
# Decrypt from clipboard
gpg --decrypt
# Decrypt a file
gpg --decrypt message.ascIf you forget your passphrase, you cannot recover your private key. You'll need to generate a new key pair and update it on Mars Market. This is why it's important to choose a memorable passphrase and consider keeping a secure backup.
Yes, you can export your private key and import it on other devices. However, this increases the risk of key compromise. Consider using separate keys for different devices or use a secure method to transfer the key.
Get the vendor's public key directly from their Mars Market profile. Be cautious of keys provided through other channels. Some vendors may sign their keys or provide key fingerprints through multiple channels for verification.