Anubis Market PGP Key
Anubis Market runs exclusively on .onion addresses. Trust matters here because clone sites appear constantly. We use Pretty Good Privacy to sign announcements and encrypt internal correspondence. This page gives you the tools to verify our identity.
Why we use PGP
Internal messages between buyers and vendors are encrypted by default. Our public announcements are signed with the same private key. If you hold the public key, you can mathematically prove that a specific message came from us. It protects against spoofing. When a new mirror launches or a policy changes, the signature confirms the source. You do not have to trust a third-party catalog. You check the crypto directly. This prevents fake shutdown notices or fraudulent fee updates.
The key
Below is our current Ed25519 public key. Compare the fingerprint against this exact string: 88E8 DD99 2713 E0BA BD26 1A29 E9F2 EF74 3674 EC6F. The key was generated on September 30, 2026. If you see a different key named "Anubis," check the fingerprint immediately. Do not rely on the name alone. Clones reuse branding but change keys. A mismatch means the key belongs to someone else. Export this block now. Keep it offline if possible.
-----BEGIN PGP PUBLIC KEY BLOCK-----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=YmAy
-----END PGP PUBLIC KEY BLOCK-----How to verify an announcement
Take any signed post from our official channels or the canary thread on Dread. Import our key into your client. Run the verification command. Look for the line stating the signature is good. This proves the text has not been altered since signing. If the status says invalid or unknown signer, stop reading. Assume the content is false until proven otherwise. Return to this page. Re-check the fingerprint. Only then attempt verification again. Unsigned posts carry no weight. Treat them as rumors.
Using it in the market
Add this key to your vendor profile settings inside the interface. Use it to encrypt your shipping address before posting a review. Contact support only through PGP-encrypted channels. They respond within 24 hours. Do not send plain text emails containing order details. Encrypt sensitive data like coin amounts or delivery preferences. The key works across all three mirrors. It remains valid regardless of which node you use. Keep it updated if we rotate keys, which we will announce via signed post. How to read and send PGP messages day to day is in reading and sending PGP messages.