ENESDEFRRU中文عربيहिं

PRIVACY IS NORMAL INFRASTRUCTURE

PGP keys & secure contact

Verified public keys for every xmr.online address, a metadata-resistant channel for confidential contact, and how to check a signature yourself. Encrypt before you send; verify before you trust.

EMAIL KEYS

Each address below has its own key. Encrypt anything sensitive to the right address, and check the fingerprint out of band — against this page over Tor, or a second source — before you rely on it.

security@xmr.online

Vulnerability reports and security disclosures

C1BC FEAD 1D90 3BD0 4004 B2E4 9C4D 3F63 8491 34F9

Download key · .asc

abuse@xmr.online

Abuse reports and scam signals

3122 A7F1 BA56 58F8 CFCD FC59 0C39 60E4 1FBC CBB7

Download key · .asc

advertisers@xmr.online

Advertising proposals and confidential commercial contact

B9C9 DF77 2B19 2AE2 E0D6 636C 4533 4A22 CAAA BF13

Download key · .asc

partners@xmr.online

Partnership and integration proposals

5512 CA78 153E 3526 DAA4 055C 8E29 AA63 E05E 8DA5

Download key · .asc

info@xmr.online

General enquiries

1D90 7B02 B17A B0EC 9D6D 3459 7068 F841 1685 0721

Download key · .asc

PROJECT SIGNING KEY

A single project signing key — the future signer of releases and any canary — is being prepared. Until it exists, the fingerprint shown in the footer is a placeholder, and /.well-known/pgp-key.asc is not yet the real key. When the key is published, its fingerprint will appear here and in the footer.

CONFIDENTIAL CONTACT

For anything confidential, reach us over SimpleX — a metadata-resistant messenger that needs no phone number, no email, and no account identifier. Our relay is self-hosted (smp.xmr.online with a Tor onion route), so the connection metadata stays with us. Add this address in SimpleX to open a channel:

https://smp.xmr.online/a#XN7GST64vZ7Tj3cRQkol0E636rjam7ctfh8AQdrU3T8?h=rayxx3lfnupmhxbrshyesgmcwhaueezrmedzgemioncdou3iopmh2zqd.onion&p=443&c=Ec0E7xgvDbPYVdmm49gfTvj7ew2sOHnsMhjZVN4PK2o

HOW TO VERIFY

  1. Import the key: gpg --import <addr>.asc after downloading it from this page.
  2. Check the fingerprint out of band — compare the 40-character fingerprint here against a second source, ideally over Tor.
  3. Verify a signed message or file: gpg --verify message.asc — a good signature from the matching key confirms it.
  4. When in doubt, encrypt to the published key and ask us to confirm the fingerprint over the confidential channel above.

PGP keys & secure contact — xmr.online

Monero PGP keys and verified addresses for xmr.online: download verified public keys for security, abuse, advertisers, partners, and general contact, each with a full 40-character fingerprint for out-of-band verification; reach a metadata-resistant SimpleX channel for secure and confidential contact with no phone number or email; and learn how to verify PGP signatures and fingerprints before you trust a key. The project signing key is pending.