If you can use PGP, show that you are not just blindly following the tutorial below. Try registering yourself and use your own best practices!
Note: GPG4USB is no longer developed and uses an outdated version of GnuPG. It is used here for its ease of use and portability. For better security, consider GPA (on Whonix-Workstation), OpenPGP Applet (on Tails), Gpg4win (Windows), GPG Suite (Mac OS), or OpenKeychain (Android).
From June 1, 2024: It is discouraged to use a darknet email address to contact other users. Cebulka PM is the recommended method of communication. To contact the administrator (e.g. if you lose access to your account), you may use Morke.org, SecTor.City, Cock.li, etc. Never use clearnet email providers (Gmail, Hotmail, Yahoo, ProtonMail) to contact the administrator or other users.
Step 1: Generate a PGP Key (GPG4USB)
1
Download GPG4USB
Download GPG4USB from https://gpg4usb.org/download.html (or from web.archive.org), and extract the ZIP contents.
GPG4USB download and extraction
2
Run GPG4USB
For Windows, run start_windows.exe. For Linux, run start_linux_32bit or start_linux_64bit depending on your system.
3
Initial Setup
Choose your language, skip twice with Next, uncheck Open offline help, and close with Finish. Open Manage keys.
4
Generate a New Key
In the Key tab, select Generate key....
Enter the Name you will use on the forum. In E-mailaddress you may enter a valid darknet e-mail address or leave it empty. The Comment field is optional.
Set the expiration date to Never Expire. Change the KeySize to 4096. Enter a secure password and click OK.
Enter the Name you will use on the forum. In E-mailaddress you may enter a valid darknet e-mail address or leave it empty. The Comment field is optional.
Set the expiration date to Never Expire. Change the KeySize to 4096. Enter a secure password and click OK.
GPG4USB key generation form
5
Wait for Key Generation
It will take a while to generate. When finished, close the Keymanagement window.
6
If Key Creation Fails (Linux)
If your PGP key has not been created and your system is Linux, see If PGP key creation fails at the bottom of this tutorial.
Make a backup copy of your key! Encrypt it with VeraCrypt or TrueCrypt and store it on external media to avoid data loss.
Step 2: Registration on Cebulka Forum
1
Go to the Registration Form
Visit the registration form.
Select I agree to the rules set out above and wish to register. and click Agree.
Select I agree to the rules set out above and wish to register. and click Agree.
2
Export Your Public Key
In GPG4USB, in the list on the right, right-click your key and select Append Selected Key(s) To Text.
Exporting your public key in GPG4USB
3
Paste Public Key into Registration Form
Copy the entire key from the text box and paste it into the Public Key field on the registration form.
Pasting your public key into the registration form
4
Decrypt the Encrypted Token
Select and copy the encrypted key from the Encrypted Token field, paste it into an empty text field in GPG4USB, and select Decrypt.
Decrypting the token in GPG4USB
5
Paste Decrypted Token
Copy the decrypted key and paste it into the TOKEN field on the registration form.
6
Solve CAPTCHA and Register
Solve the CAPTCHA by clicking five times in a row on sliced onions and click Register.
Cebulka CAPTCHA: click on sliced onions
Step 3: Login to Cebulka Forum
1
Go to the Login Form
Visit the login form.
2
Enter Nickname
Enter your nickname and click Next.
Cebulka login form: enter nickname
3
Decrypt the Encrypted Token
Copy the encrypted key from the Encrypted Token field and decrypt as in the registration steps. Copy the decrypted key into the TOKEN field.
Decrypting the login token
4
Login
Use the Login button to access your account.
By default, your email address is hidden in your profile for privacy. The PGP key contains your email address, so it is also hidden. You can change this in Profile → Settings → Show my email address to other users.
If PGP Key Creation Fails (GPG4USB, Debian)
1
Run GPG4USB from Terminal
Navigate to the GPG4USB path and execute it from the terminal. When you try to generate a new key, you may see Invalid crypto engine errors:
user@host:/path/to/gpg4usb$ ./start_linux_64bit
[Error] Source: GPGME String: "Invalid crypto engine"
[Error] Source: GPGME String: "Invalid crypto engine"
2
Install Newest GPG
Open terminal and install the newest GPG with:
user@host:~$ sudo apt-get update
user@host:~$ sudo apt-get install -y gpg
user@host:~$ sudo apt-get install -y gpg
3
Replace GPG Binary in GPG4USB Path
Replace the GPG binary in the GPG4USB path with:
user@host:~$ mv /path/to/gpg4usb/bin/gpg /path/to/gpg4usb/bin/gpg_original
user@host:~$ ln -s /usr/bin/gpg /path/to/gpg4usb/bin/gpg
user@host:~$ ln -s /usr/bin/gpg /path/to/gpg4usb/bin/gpg
Security Reminder: There is no alternative method for verifying your previous identity or restoring access to your account after losing your PGP key. Access to your email, messaging services, or knowledge of completed transactions is not considered for account recovery. Always create a backup and store copies of your keys in a secure location. If you lose access and have no backup, you must create a new account.
Cebulka → Post #120496
Ralts wrote:
Ralts wrote: