Help

• I received an email from Deadswitch
• If the Deadswitch website is unavailable
• Checking that files are genuine
• For switch owners

I received an email from Deadswitch

You are a nominated recipient of a switch that has been triggered. The files were encrypted to your PGP public key by the person who created the switch, so only you can read them.

1. Open the link in the email. It takes you to the switch page.
2. Click Download decrypted files. Your browser removes Deadswitch's layer of encryption and saves each file with a .gpg extension. Nothing is decrypted on our servers.
3. Open each .gpg file with your own PGP private key:
   • GnuPG (Linux, macOS, Windows): gpg --output report.pdf --decrypt report.pdf.gpg
   • Kleopatra (Windows): File → Decrypt/Verify, then choose the file.
   • GPG Suite (macOS): right-click the file, then Services → OpenPGP: Decrypt File.

If the Deadswitch website is unavailable

A switch does not depend on Deadswitch staying online. Its encrypted files, and the private key for Deadswitch's layer of encryption, are published on the switch page, and the passphrase is in your email (and is published when the switch triggers). With all three, anyone can remove Deadswitch's layer; the result is still encrypted to your key.

You need:

• the encrypted file, ending in .gpg.gpg;
• the switch's Deadswitch private key (private_key.txt in the switch's download bundle, or copied from the switch page);
• the passphrase from your email.

With GnuPG

1. Import the Deadswitch key (enter the passphrase if asked):

   gpg --import private_key.txt

2. Remove Deadswitch's layer (enter the passphrase when asked):

   gpg --output report.pdf.gpg --decrypt report.pdf.gpg.gpg

3. Open the result with your own private key:

   gpg --output report.pdf --decrypt report.pdf.gpg

Checking that files are genuine

If the switch owner chose to publish them, the switch page lists a SHA-1 hash for each original file. After decrypting, compare it with the hash of your copy:

sha1sum report.pdf                    (Linux)
shasum -a 1 report.pdf                (macOS)
certutil -hashfile report.pdf SHA1    (Windows)

For switch owners

• Your files are encrypted in your browser before they are uploaded: first to each recipient's public key, then to a key unique to your switch. Deadswitch never sees their contents.
• If your switch reaches its end date without being terminated, it triggers and your recipients are sent the files.
• Your terminate password cancels the switch, so nothing is released. Your trigger password releases the files straight away.
• Keep both passwords somewhere safe. We cannot recover or reset them.

Still need help? Contact us.