GPG users,

How do you share your GPG key securely on each system. Are you simply storing them on each machine, are you use cloud storage (seems like a horrible idea), SD cards?

tark

My public key is on the interwebs.
My private key stays, well private.

USB sounds reasonable for such.
Define "share".

Sharing across multiple systems like a laptop and a desktop. A work machine and home machine. I guess I could use a USB key, I would just hate to lose it somewhere one day...

The easy and customary way is to upload the public key to a well known key-server, such as pgp.mit.edu, then circulate its "key signature," which is an eight-digit hexadecimal number like 12AB-34CD. This is one way to allow the public key to be retrieved from the server.

On larger systems, there are other ways to do it. For instance, public keys can be stored in an LDAP ("OpenDirectory") server.

Since they, are ... well ... public, their contents do not have to be concealed. You just need a convenient way to manage them.

1 members found this post helpful.

I did not explicitly say, but I have been meaning my private key.

It's stored on each device you've imported it to. No need for it again, unless you want to import it to a new system. You can export it to a flash drive and then delete it after the import. You can keep a copy of it somewhere if you want, but it's risky. You can encrypt it somehow, via an encrypted drive or file like veracrypt/truecrypt, or encrypt it with gpg. It's safer left in your gpg app, though.

To export your private key, you first need to know the key ID, which can be found with
(The ID will be something like 0xABCDEF)

Once you have the key ID, you want to export it
NOTE: I can never remember the proper sequence to make it write to a file instead of the terminal since I rarely need to do it. This is based on the man pages, and I *think* it's correct, but since I can't currently test it I can't say for sure that it will work as expected.

Then you will want to securely transfer the file to the other computer (preferably not over a network, use a USB key or something).
Then you need to import it

I can never remember gpg commands. Every desktop environment I know of has a GUI frontend for gpg, even Enigmail. It's far easier to do the import/export using them, at least for me. I don't do enough of that to maintain proficiency. Once Enigmail or whatever you're using is configured, there is no need to do much, or remember much, other than your passphrase. I don't carry my private key around, I only need it to import into a new program.

+1 for Enigmail "Key Management".