OpenPGP

Install the SSH/PGP Agent app on your Ledger device to sign encrypted messages through GNU Privacy Guard (GnuPG). This app is for developers that are proficient in using OpenPGP. It becomes available in My Ledger if Developer mode is activated in Settings > General.

The private keys used are not generated by the recovery phrase set up on the Ledger device. Carefully back them up by yourself. An experimental add-on can generate the PGP keys from the recovery phrase, although it is not fully tested.

Before you start

• Set up Ledger Live with your Ledger device.
• Update the firmware on your Ledger hardware wallet.

Install the OpenPGP app

1. Go to Settings > Experimental features in Ledger Live.
2. Enable Developer mode.
3. Open My Ledger.
4. Connect and unlock your device.
5. If asked, allow My Ledger to access your device.
6. Find OpenPGP in the app catalog.
7. Click the Install button of the app.
   • An installation window appears.
   • Your device will display Processing... 
   • The app installation is confirmed.

OpenPGP

1. Get GnuPG to manage your keys.
2. Check the developer documentation on GitHub to learn how to set up and use OpenPGP.

Windows Agent for PuTTy

1. Clone the repo: https://github.com/Falsen/ledger-app-ssh-agent
2. Run run.bat from the cloned repo.
3. Open the SSH/PGP app on your Ledger device.
4. Confirm the public key export on your Ledger device.
5. Start PuTTy, enter your IP address.
   • Under Connection > Data, enter your username.
   • Under Connection > SSH > Auth, check Allow agent forwarding.
6. Save this profile and you're all set! When logging in you can authenticate with your Ledger device.
7. To get the Public key, right-click the Ledger icon in the lower right-hand corner to find the Get public key option. Once you confirm on the device, the public key will be in your clipboard.

   run.bat must run at all times. The Ledger icon in the corner confirms that it's working.