PGP Key

Due to the sensitive nature of security information, Okta provides a method for you to:

  • Verify the authenticity of security notifications
  • Encrypt messages to send to Okta via [email protected]

1. Obtain PGP

You can download free software for generating PGP keys from https://gnupg.org/download/index.html

2. Okta PGP key

Key ID: 746BF04A
Fingerprint: 9E66 684F 0EBD 4081 7D56  AF77 543D C29E 746B F04A
Key
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=+f5T
-----END PGP PUBLIC KEY BLOCK-----

The Okta PGP key has an operational life span of two years. When we generate a new key, it will be available from this web page.

3. Check our PGP signature on mail messages and documents

Documents developed by the Okta Security team are signed with the Okta PGP key. We encourage you to check the signature to ensure that the document was indeed written by our staff and has not been changed.

Note for users of the security-announce mailing list:

Some mail programs cause changes to messages, resulting in an indication that the PGP signature is not good. Critical information will also be posted to our web site along with a PGP signature, providing you with a confirmation of authenticity.

4. Encrypting sensitive information

When sending sensitive security information by email, please encrypt it.