PGP

PGP does three jobs around a market like this. It checks signed posts so you know a list really came from the market. It hides your address from everyone but the vendor you are ordering from. And it locks your login so a stolen password on its own is not enough to get in. Set it up once and it pays off on every visit.

Make a key

gpg --full-generate-key
gpg --armor --export "you@handle" > mypub.asc

Keep the private key on the machine you use for the market, behind a strong passphrase. Never paste a private key into any web page.

Check a signed list

gpg --import blackops.asc
gpg --verify links.txt.asc links.txt

A Good signature line means the list is the market's and unchanged.

Encrypt to a vendor

gpg --recipient VENDOR --armor --encrypt address.txt

Paste the encrypted block into your order so only the vendor can read it. Do the encrypting on your own machine, because the point of PGP is that the plain text never leaves you.

Lock your login

Turn on PGP login in your account settings. From then on the market gives you a coded challenge at login, you decrypt it on your side, and you paste the answer back. Someone who has only your password cannot get past that.

Updated 2026-07-18 · Security