# Install gnupg with Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, scoop, winget, zypper

GNU Privacy Guard (OpenPGP). Version 2.5.21 via Homebrew; verified 2026-07-02.

## Install

```sh
sudo av install brew:gnupg
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install gnupg
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add gnupg
```

  Evidence: Alpine Linux edge package indexes: gnupg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install gnupg
```

  Evidence: Debian stable package indexes: gnupg from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install gnupg2
```

  Evidence: Fedora Rawhide package metadata: gnupg2 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#gnupg
```

  Evidence: nixpkgs package indexes: gnupg from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S gnupg
```

  Evidence: Arch Linux sync databases: gnupg from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install gpg2
```

  Evidence: openSUSE Tumbleweed package metadata: gpg2 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install gnupg
```

  Evidence: Chocolatey community package catalog: gnupg from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','glab'

- Scoop (92%):

```sh
scoop install main/gnupg
```

  Evidence: Scoop official bucket manifest trees: bucket/gnupg.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id GnuPG.GnuPG -e
```

  Evidence: Windows Package Manager source index: GnuPG.GnuPG from https://cdn.winget.microsoft.com/cache/source.msix

## Package facts

- **Package key:** brew:gnupg
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/gnupg>
- **Version:** 2.5.21
- **Source summary:** GNU Privacy Guard (OpenPGP)
- **Homepage:** <https://gnupg.org/>
- **Repository:** <https://dev.gnupg.org/source/gnupg.git>
- **Upstream docs:** <https://gnupg.org/documentation/index.html>
- **License:** GPL-3.0-or-later
- **Source archive:** <https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.5.21.tar.bz2>
- **Last updated:** 2026-07-02T18:06:04Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- addgnupghome (cli)
- applygnupgdefaults (cli)
- dirmngr (cli)
- dirmngr-client (cli)
- gpg (cli)
- gpg-agent (cli)
- gpg-authcode-sign.sh (cli)
- gpg-card (cli)
- gpg-connect-agent (cli)
- gpg-mail-tube (cli)
- gpg-wks-client (cli)
- gpg-wks-server (cli)
- gpgconf (cli)
- gpgparsemail (cli)
- gpgscm (cli)
- gpgsm (cli)
- gpgsplit (cli)
- gpgtar (cli)
- gpgv (cli)
- kbxutil (cli)
- watchgnupg (cli)
- addgnupghome (alias)
- applygnupgdefaults (alias)
- dirmngr (alias)
- dirmngr-client (alias)
- gpg (alias)
- gpg-agent (alias)
- gpg-authcode-sign.sh (alias)
- gpg-card (alias)
- gpg-connect-agent (alias)
- gpg-mail-tube (alias)
- gpg-wks-client (alias)
- gpg-wks-server (alias)
- gpgconf (alias)
- gpgparsemail (alias)
- gpgscm (alias)
- gpgsm (alias)
- gpgsplit (alias)
- gpgtar (alias)
- gpgv (alias)
- kbxutil (alias)
- watchgnupg (alias)

## Dependencies

- gettext
- gnutls
- libassuan
- libgcrypt
- libgpg-error
- libksba
- libusb
- npth
- pinentry
- readline

## Build dependencies

- pkgconf

## Uses from macOS

- bzip2
- openldap
- sqlite

## Install behavior

- Post-install hook: defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.5.21
- Package-manager updated: 2026-07-02
- Local data: ok
- Upstream repository: https://gnupg.org/
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

GnuPG, also known as GPG, is the GNU Privacy Guard: a free implementation of the OpenPGP standard used for encryption, signatures and key management.

### Project history

GnuPG was introduced in 1997 as Free Software and became the GNU project's OpenPGP implementation. The project describes it as a complete and free implementation of OpenPGP, with command-line integration, key-management facilities and access modules for public-key directories.

The release-line history shows the 1.0 branch born in 1999, the 1.4 branch in 2004, the 2.0 branch in 2006 and later 2.x branches adding the more modular architecture around gpg-agent, dirmngr, gpgsm, smart-card support and supporting libraries.

### Adoption history

GnuPG became a standard security tool in Unix-like systems and software-distribution workflows. The project download page notes that common Linux distributions such as Debian, Fedora, Red Hat and Ubuntu include GnuPG, while Gpg4win provides an integrated Windows distribution with a context menu tool, crypto manager and Outlook plugin.

Its ecosystem includes libraries and frontends as well as helper packages such as pinentry, GPGME, GPA and Scute. That surrounding stack made GnuPG a platform for applications needing OpenPGP operations rather than only an interactive command.

### How it is used

Practitioners use GnuPG to encrypt and decrypt files or messages, create and verify signatures, manage public and private keys, fetch or publish keys through directory mechanisms, operate smart cards and verify downloaded source releases. Its command-line interface also makes it common in scripts, build systems and release automation.

### Why package nerds care

For package users, GnuPG is foundational plumbing: it links archive signatures, maintainer keys, trust databases, agents, pinentry programs, smart-card daemons and language bindings. Installing it often means installing the small operational security stack around OpenPGP, not just the gpg binary.

### Timeline

- 1997: GnuPG was introduced as Free Software.
- 1999: The 1.0 release branch was born.
- 2004: The 1.4 release branch was born.
- 2006: The 2.0 release branch was born.
- 2014: The 2.2 release branch was born.
- 2021: The 2.4 release branch was born.

### Related projects

- GnuPG implements OpenPGP and is related to PGP by protocol lineage. Its project ecosystem includes GPGME, pinentry, dirmngr, gpg-agent, gpgsm, Scute, GPA and Gpg4win.

### Sources

- <https://gnupg.org/documentation/manuals/gnupg/>
- <https://gnupg.org/download/index.html>
- <https://gnupg.org/download/release_notes.html>
- <https://www.gnupg.org/>


## Security Notes

No matching local secret-handling manifest was found for gnupg. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.gnupg/gpg.conf, ~/.gnupg/gpg-agent.conf, ~/.gnupg/dirmngr.conf, ~/.gnupg/common.conf

## Credential files

- Unix: ~/.gnupg/private-keys-v1.d/, ~/.gnupg/secring.gpg, ~/.gnupg/trustdb.gpg
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** gnupg
- **Aliases:** gnupg@2.5, gpg, gpg2
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Debian apt - gnupg - 2.4.7-21+deb13u1: normalized package name match | Debian stable package indexes: gnupg from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | GNU privacy guard - a free PGP replacement | https://www.gnupg.org/
- Nix - gnupg: normalized package name match | nixpkgs package indexes: gnupg from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - gnupg - 2.4.4-2ubuntu17: normalized package name match | Ubuntu 24.04 LTS package indexes: gnupg from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | GNU privacy guard - a free PGP replacement | https://www.gnupg.org/
- apk - gnupg - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - meta package for full GnuPG suite | https://www.gnupg.org/
- apk - gnupg-dirmngr - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-dirmngr from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - network certificate management service | https://www.gnupg.org/
- apk - gnupg-doc - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - meta package for full GnuPG suite (documentation) | https://www.gnupg.org/
- apk - gnupg-gpgconf - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-gpgconf from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - core configuration utilities | https://www.gnupg.org/
- apk - gnupg-keyboxd - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-keyboxd from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - keyboxd manager | https://www.gnupg.org/
- apk - gnupg-lang - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-lang from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Languages for package gnupg | https://www.gnupg.org/
- apk - gnupg-scdaemon - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-scdaemon from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - smart card support daemon | https://www.gnupg.org/
- apk - gnupg-scdaemon-udev - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-scdaemon-udev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - meta package for full GnuPG suite (udev rules) | https://www.gnupg.org/
- apk - gnupg-utils - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-utils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - utility programs | https://www.gnupg.org/
- apk - gnupg-wks-client - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gnupg-wks-client from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - Web Key Service client | https://www.gnupg.org/
- apk - gpg - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gpg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - public key operations only | https://www.gnupg.org/
- apk - gpg-agent - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gpg-agent from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - cryptographic agent | https://www.gnupg.org/
- apk - gpg-wks-server - 2.4.9-r1: normalized package name match | Alpine Linux edge package indexes: gpg-wks-server from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | GNU Privacy Guard 2 - Web Key Service server | https://www.gnupg.org/


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [gettext](https://www.automicvault.com/pkg/brew/gettext/) - Runtime dependency declared by Homebrew.
- [gnutls](https://www.automicvault.com/pkg/brew/gnutls/) - Runtime dependency declared by Homebrew.
- [libassuan](https://www.automicvault.com/pkg/brew/libassuan/) - Runtime dependency declared by Homebrew.
- [libgcrypt](https://www.automicvault.com/pkg/brew/libgcrypt/) - Runtime dependency declared by Homebrew.
- [libgpg-error](https://www.automicvault.com/pkg/brew/libgpg-error/) - Runtime dependency declared by Homebrew.
- [libksba](https://www.automicvault.com/pkg/brew/libksba/) - Runtime dependency declared by Homebrew.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [blackbox](https://www.automicvault.com/pkg/brew/blackbox/) - Popular package that depends on this formula.
- [duplicity](https://www.automicvault.com/pkg/brew/duplicity/) - Popular package that depends on this formula.
- [git-secret](https://www.automicvault.com/pkg/brew/git-secret/) - Popular package that depends on this formula.
- [gopass](https://www.automicvault.com/pkg/brew/gopass/) - Popular package that depends on this formula.
- [gpg-tui](https://www.automicvault.com/pkg/brew/gpg-tui/) - Popular package that depends on this formula.
- [gpgme](https://www.automicvault.com/pkg/brew/gpgme/) - Popular package that depends on this formula.
- [monkeysphere](https://www.automicvault.com/pkg/brew/monkeysphere/) - Popular package that depends on this formula.
- [gnupg@1.4](https://www.automicvault.com/pkg/brew/gnupg-1-4/) - Package name indicates the same formula family.
- [ntbtls](https://www.automicvault.com/pkg/brew/ntbtls/) - Shares the same upstream homepage.
- [hopenpgp-tools](https://www.automicvault.com/pkg/brew/hopenpgp-tools/) - Shares av.db curated category or tags: cli, cryptography, key-management, openpgp, security.
- [rnp](https://www.automicvault.com/pkg/brew/rnp/) - Shares av.db curated category or tags: cli, cryptography, openpgp, security.
- [sequoia-chameleon-gnupg](https://www.automicvault.com/pkg/brew/sequoia-chameleon-gnupg/) - Shares av.db curated category or tags: cli, cryptography, openpgp, security.
- [sequoia-sqv](https://www.automicvault.com/pkg/brew/sequoia-sqv/) - Shares av.db curated category or tags: cli, cryptography, openpgp, security.
- [gpa](https://www.automicvault.com/pkg/brew/gpa/) - Shares av.db curated category or tags: cli, cryptography, key-management, openpgp, security.
- [aescrypt](https://www.automicvault.com/pkg/brew/aescrypt/) - Shares av.db curated category or tags: cli, cryptography, encryption, security.
- [aespipe](https://www.automicvault.com/pkg/brew/aespipe/) - Shares av.db curated category or tags: cli, cryptography, encryption, security.

## Combined YAML source

View the package source record on GitHub. [combined/gnupg.yml](https://github.com/automic-vault/db/blob/main/combined/gnupg.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
