From 5d452a919064a7c39969b8458cd8c20d8a9a331b Mon Sep 17 00:00:00 2001 From: drduh Date: Mon, 18 Dec 2017 02:44:03 +0000 Subject: [PATCH] Reference paper backup instructions, fix #3 --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 267cd50..cd9e91f 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ If you have a comment or suggestion, please open an [issue](https://github.com/d - [Authentication key](#authentication-key) - [Check your work](#check-your-work) - [Export keys](#export-keys) - - [Back up everything](#back-up-everything) + - [Backup everything](#backup-everything) - [Configure YubiKey](#configure-yubikey) - [Configure smartcard](#configure-smartcard) - [Change PINs](#change-pins) @@ -485,10 +485,12 @@ In addition to the backup below, you might want to keep a separate copy of the revocation certificate in a safe place: `$GNUPGHOME/openpgp-revocs.d/.rev` -## Back up everything +## Backup everything Once keys are moved to hardware, they cannot be extracted again (otherwise, what would be the point?), so make sure you have made an *encrypted* backup before proceeding. +Also consider using a [paper copy](http://www.jabberwocky.com/software/paperkey/) of the keys as an additional backup measure. + To create an encrypted USB drive, first attach it and check its label: $ dmesg | tail