COMO USAR PGP NO QUBES DE MODO ULTRA SEGURO QUE POUCOS SABEM: PRIVATE KEY E SENHA AIR-GAPPED

COMO USAR PGP NO QUBES DE MODO ULTRA SEGURO QUE POUCOS SABEM: PRIVATE KEY E SENHA AIR-GAPPED

HOW TO USE PGP IN QUBES IN AN ULTRA SECURE WAY THAT FEW KNOW: PRIVATE KEY AND AIR-GAPPED PASSWORD

by Leandro Santos (Leandroibov)

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURYData encryption
🎙 Leandro Santos (Leandroibov) 👥 6K 📅 December 2, 2025 ⏱ 47 min 👁 300 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

PGPQubes OSair-gappedKleopatraprivate key

Summary

The video, presented by Leandro Santos, demonstrates a secure method for using PGP (Pretty Good Privacy) within Qubes OS, emphasizing an ’eternal air-gap’ strategy. The creator begins by illustrating common mistakes, such as storing private keys and entering passphrases on online VMs, which exposes them to potential compromise. He then advocates for keeping the PGP key and passphrase on an offline VM, using a dedicated template with Kleopatra installed. The tutorial covers creating a cloned template, installing Kleopatra, and setting up an offline AppVM for key management. It demonstrates encrypting files and messages on the offline VM, then transferring them to online VMs via Qubes’ secure inter-VM copy/paste or file transfer mechanisms. The video also shows decrypting received messages on the offline VM, ensuring that private keys and passphrases never touch networked environments. The method leverages Qubes’ isolation to contain potential attacks, making it significantly harder for adversaries to exfiltrate cryptographic material. The presentation is practical, with step-by-step instructions, but includes some troubleshooting and informal commentary.

166 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable, actionable information for enhancing PGP security in Qubes OS. The core argument—that private keys and passphrases should be kept offline—is well-supported by the demonstration of attack vectors, such as keyloggers and supply chain attacks. The step-by-step tutorial is clear and practical, enabling viewers to implement the method. The argumentation is solid, though it relies on anecdotal evidence and personal expertise rather than formal citations. The creator effectively communicates the importance of isolation and compartmentalization, which are fundamental to Qubes OS’s security model.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates a high level of technical rigor in its methodology, aligning with established best practices for air-gapped key management. However, it lacks explicit citations to external sources, relying instead on the creator’s experience and the Qubes OS documentation. The description includes links to the creator’s own website and courses, which are not authoritative references. The title accurately reflects the content, and the tutorial is well-structured. The absence of formal references slightly reduces the scientific rigor, but the practical demonstration compensates for this.

185 words

Title / Content Match

The title accurately reflects the content, which focuses on using PGP in Qubes OS with an air-gapped private key and passphrase.

Quality & Reliability

7/10

The video provides a practical, step-by-step tutorial on using PGP with Qubes OS, emphasizing an air-gapped approach. The method is technically sound and aligns with established security practices, but the presentation is informal and lacks citations to external authoritative sources. The creator's expertise is evident, but the content is not peer-reviewed and relies on personal experience.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

Contribution & Novelties

The video offers a practical, step-by-step guide to implementing an air-gapped PGP workflow within Qubes OS, which is a significant improvement over common practices that expose private keys and passphrases on online systems. The method leverages Qubes’ compartmentalization to isolate cryptographic operations, providing a robust defense against sophisticated attacks. The tutorial is accessible and actionable, making advanced security techniques available to a broader audience.

Pour aller plus loin :

113 words

Radar Profile

The radar profile shows high scores in quantity and quality of information, indicating a content-rich tutorial. The technical level is also high, reflecting the advanced nature of the topic. The overall reliability is good, though not perfect, due to the lack of formal citations. This suggests a practical, experience-based guide that is valuable for users seeking to enhance their PGP security in Qubes OS.

Reliability 7/10

💬 No comments were provided for analysis.