Are exported private keys in GPG still encrypted?

Exported secret keys are encrypted by default, however --export-options export-reset-subkey-passwd will produce an unprotected export:

When using the –export-secret-subkeys command, this option resets the passphrases for all exported subkeys to empty. This is useful when the exported subkey is to be used on an unattended machine where a passphrase doesn’t necessarily make sense. Defaults to no.

Leave a Comment

error code: 521