How to Securely Activate PGP 2FA ON TorZon

When browsing a TorZon darknet directory or accessing the marketplace, password security alone is insufficient. Activating PGP Two-Factor Authentication (2FA) ensures that even if your password is compromised via a phishing link, your account remains impenetrable. This guide covers the essential software and steps required to secure your login.

Step 1: Download Encryption Software

Before you can generate keys, you need a PGP management tool. Depending on your operating system, download the appropriate software below. These tools are generally free and open-source.

---

Step 2: Creating Your Key Pair

Once you have installed Kleopatra (via Gpg4win), follow these steps to generate your unique identity:

1. Open Kleopatra. If this is your first time, the screen will be empty.
2. Click on “File” > “New OpenPGP Key Pair”.
3. Enter a Username (this does not need to be your real name) and an Email (can be fake).
4. Important: Set a strong Passphrase. You will need this password every time you sign or decrypt a message.
5. Click “Create”. Your key will now appear in the certificate list.

Step 3: Exporting Your Public Key

To let TorZon know who you are, you must share your Public Key (never share your Private Key).

Right-click your new entry in Kleopatra, select Export, and save it as a text file, or simply open it in a text editor like Notepad. You will see a block of text starting with -----BEGIN PGP PUBLIC KEY BLOCK-----.

---

Step 4: Activating 2FA on TorZon

Now that you have your key, follow these instructions to secure your account:

• Log in to TorZon and navigate to Profiles.
• Select “PGP/2FA Settings” from the menu.
• Paste your Public Key into the designated field and click Update.

Troubleshooting: If the PGP field remains empty after updating, wait 5-10 minutes. Newly generated keys sometimes take a moment to register on the server.

Step 5: Verifying the Connection

After clicking update, the market will present you with an encrypted message block. This is a test to ensure you own the private key associated with the public key you just uploaded.

1. Copy the entire encrypted message block from the website.
2. Open Kleopatra, click on the Notepad tab, and paste the text.
3. Click the “Decrypt / Verify” button.
4. Enter your Passphrase when prompted.
5. The text will convert into a readable verification code. Copy this code.
6. Go back to the TorZon page, paste the code into the “PGP Verification Key” field, and click Submit.

After entering your password, the message should now have been decrypted.

Enter the “PGP Verification Key” in the field and click on Submit.

PGP 2FA has been activated

If it appears like this, 2FA has been successfully activated!