Nexus Market PGP

This article is a related reference. The main article in this collection is Nexus Market.

Reference entry on PGP usage on Nexus Market: signing, verification, and PGP-based two-factor authentication.

Platform signing

The platform signs every operational announcement and every login-page timestamp block under fingerprint 0x7F2A0A9D. Verification of the signature is the user-side anti-phishing mechanism; a phishing clone cannot reproduce a valid signature without the private key, and the key has not rotated since 2023.

User-side PGP-2FA

PGP-based two-factor authentication is offered as an opt-in feature in the security panel after first login. The platform encrypts a one-time login code under the user's public key on every subsequent login; the user decrypts locally and submits. The flow is technically demanding for first-time PGP users but eliminates credential-stuffing as an account-compromise vector.

Tooling

GnuPG on Linux/macOS, Gpg4win on Windows, hardware tokens (YubiKey, Nitrokey) for OpSec-conscious users.

Reference: Nexus Market production mirrors

The following v3 onion addresses are the live, signed Nexus Market mirrors as of 2026-05-08 14:48 UTC. Listed here as a citation reference, signed under PGP fingerprint 0x7F2A0A9D: