The Attester is a key server for FlowCrypt users. You can use it to manage your public key or search for someone else’s. In the sections below, we’ll visually guide you through how you can upload, change, delete, or search for a key using the Attester.
Upload a public key
Since the Attester is meant to be for FlowCrypt users, you submit a key by installing and using FlowCrypt. While setting up the extension, you’ll see a screen that looks like this:
At this point, whether you select to upload your own key, or let FlowCrypt create it for you, the public part of that key (a public key) will be sent to the Attester server by default, where it will be publicly available for anyone who wants to send you encrypted messages.
Alternatively, you can skip uploading your public key to Attester. In this case, you’ll have to manually share your public key with all of your recipients. This is workable, but not that convenient.
Remove a public key
Removing a key via the Attester is even more straightforward than uploading it. Browse to flowcrypt.com/attester and click Dismiss Your Public Key, or just go directly to this section. You should see this page:
Enter your email address and click Dismiss Public Key. You’ll receive an email requesting confirmation. This is important because it prevents other people from dismissing your key without your consent. Click the confirmation link and you’re done.
Replace a public key
The process of replacing a key is similar to removing it. You go to flowcrypt.com/attester and click Update or Replace Your Public Key. It will redirect you to a page that looks like this:
There, paste the new key you wish to use into the text area, then enter your email and click Replace Public Key. You’ll receive a confirmation email, and upon confirming, your key will be updated on the Attester database.
Sync with other key servers
Public keys uploaded to Attester aren’t automatically synced to any other key servers. If you communicate with people who use other OpenPGP software, who don’t use WKD (Web Key Directory) or other advanced solutions, we recommend uploading your public key manually to openpgp.org as well.
Search for a public key
Searching for a key can be done at flowcrypt.com/lookup address. Type in the email address you wish to find and click Get Public Key. You’ll be presented with the following information:
The Long ID is a unique signature used to identify your public key. For example, with the GnuPG command line utility, we can download and view a public key from the Attester server using its Long ID like so:
➜ ~ gpg --keyserver attester.flowcrypt.com --recv-keys 33C0ECECB888C419
gpg: directory '/home/alex/.gnupg' created
gpg: keybox '/home/alex/.gnupg/pubring.kbx' created
gpg: /home/alex/.gnupg/trustdb.gpg: trustdb created
gpg: key 33C0ECECB888C419: public key "Alejandro Alvarado <alex@flowcrypt.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
➜ ~ gpg --export -a
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEXtkufxYJKwYBBAHaRw8BAQdAEumP9mQ4J2WwxvobXB83FleS7rzAMiVBpnm0
aXiH3zO0J0FsZWphbmRybyBBbHZhcmFkbyA8YWxleEBmbG93Y3J5cHQuY29tPoh4
BBAWCgAgBQJe2S5/BgsJBwgDAgQVCAoCBBYCAQACGQECGwMCHgEACgkQM8Ds7LiI
xBl/5gEAiAmBnaA9gqy9DnlmWneBLXokjh8w0YxrF9L/Pn/bf5IBAIC2DeFZjCGq
tkYhjqboHjYrik1NsZQjJTkUOEksDxcIuDgEXtkufxIKKwYBBAGXVQEFAQEHQCn3
uPFsdPiffwNwXVl8ybf5vuruvi42Bh6XISO62odyAwEIB4hhBBgWCAAJBQJe2S5/
AhsMAAoJEDPA7Oy4iMQZMC8A/jJguhTkVhvPagLK7e/IbDlLpZ1Eq+1EHXr77Wnl
uR/sAP9AN818MJ9dBD1yo6XoYHQRG9uAW5AW/xP5Tr+Y6Z8eAg==
=crYM
-----END PGP PUBLIC KEY BLOCK-----
That’s it! We hope this guide has helped you attain Attester mastery. If you’re still stuck trying to do something on the Attester, don’t hesitate to reach out to us at human@flowcrypt.com.