PGP Key Management

Pretty Good Privacy (PGP) is the gold standard of darknet security. On Torzon Market, PGP is not an option—it is a requirement for account survival. In 2026, we mandate the use of at least 4096-bit RSA keys or modern Elliptic Curve (ECC) keys to ensure long-term resistance against brute-force attacks.

Why use PGP?

  • End-to-end encryption for shipping data.
  • 2FA authentication to prevent account theft.
  • Verification of the market's official mirrors.

02. Setting up PGP 2FA

Once you register on Torzon, you must import your Public Key into your profile settings. Enabling PGP 2FA means that every time you log in, the market will present you with an encrypted message. You must decrypt this message using your Private Key and enter the contained token to access your account. This prevents even the most advanced phishing sites from taking over your profile, as they do not possess your Private Key.

Remember: If you lose your Private Key or forget your PGP passphrase, account recovery is impossible. Torzon staff cannot reset your PGP settings due to security protocols.

03. Verifying Mirrors with PGP

Phishing sites are the #1 threat. Before entering your credentials, copy the cleartext signature from the mirror's footer and verify it against the Torzon Master Public Key. Only if the signature is "GOOD" should you proceed. This simple 30-second check is the difference between a secure session and losing your entire XMR balance.