PGP (Pretty Good Privacy) is a family of software systems that provides cryptographic privacy and authentication.

Here is my public key with ID 0x8DBE80B7; use it to send encrypted messages and files to me, and to verify signed messages I sent:

Before using my public key, you should validate it by personally verifying the key’s fingerprint with me. The key’s fingerprint can be calculated from the key itself. Instead, you could also use the fingerprint mentioned below but only after verifying the signature of this message. After making sure you got the fingerprint for the public key above one way or the other, you should then proceed to personally verify it with me. After all, this page you’re looking at, could be forged to trick you into thinking you’ve got my public key when you actually don’t.

PGP is a family of software systems following the OpenPGP standard as defined by RFC4880 for encrypting and decrypting data. GnuPG is a free and open source implementation of this standard. It is a command line tool with features for easy integration with other applications.

On Windows, I recommend Gpg4win which includes both GnuPG and Kleopatra, a graphical user front-end for GnuPG. To use GnuPG in Thunderbird, have a look at the Enigmail extension.

More information: How to: Use PGP on Windows