gpg --verify file.sig file

Category: Security & Hardening

gpg --verify file.sig file

Verify a detached signature against a file

Checks that file was signed by the holder of the key that made file.sig, using the public key in your keyring. A good signature confirms authenticity and integrity, while a missing key makes verification impossible. Always verify downloads before running them.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.