# Create or upload your PGP keys

To set up PGP, open **Settings › Security › Encryption**. Enter a passphrase twice and click **Generate Key**, or click **Upload** to add an existing public and private key. Use **Key(s) List** to download your public key and share it. Then tick **Encryption** or **Signed** in Classic compose to send protected mail.

## How to create or upload your PGP keys

1. Click your profile picture, choose **Settings**, open **Security** and then the **Encryption** tab.
2. To create a key, enter a passphrase, enter it again and click **Generate Key**.
3. To use a key you already have, click **Upload**, choose your public and private key files, enter the passphrase and click **Upload Both Key**.
4. Open **Key(s) List** to download your public key and send it to the people who will write to you.

## When to use it

> Kiran, a lawyer at example.in, generates a PGP key and sends her public key to outside counsel. They now send privileged documents to her encrypted, and only she can open them.

## Options

| Option | What it does |
|---|---|
| **Generate Key** | Creates a new key pair protected by your passphrase. |
| **Upload** | Adds a key pair you already use elsewhere. |
| **Key(s) List** | Shows your keys. Download a public or private key, view key information, choose the active key or delete a key. |
| **Mail Encryption** / **Digital Signature** | Encrypt or sign every outgoing mail by default. |

## Send PGP mail

PGP encryption and signing are in Classic compose. Click the arrow next to **Compose Mail**, turn on **Classic**, then tick **Encryption**, **Signed** or both. They are two separate checkboxes. Each recipient needs a PGP public key for encryption.

## Good to know

- Deleting a key pair means you can no longer read mail encrypted with it. XgenPlus warns you first.
- Your administrator can hide the Encryption tab. If it is missing, ask them.
- If your organisation issues S/MIME certificates, you can sign and encrypt in new compose without PGP.

## Common questions

**What if I forget my passphrase?**

XgenPlus does not store it, so it cannot be recovered. Without it you cannot read mail encrypted with that key. Keep it safe and never share it.

**Can I have more than one key?**

Yes. **Key(s) List** shows all your keys, marks the default one and lets you choose another key as active.

**Which key types can I upload?**

The upload screen accepts a DSA/ElGamal key pair. Generating a new key in XgenPlus avoids the question.


Source: https://docs.xgenplus.com/security/create-pgp-keys/