GPG

This GPG plugin for Sublime Text 3 adds commands to decrypt, encrypt, sign, and authenticate documents. It requires a working copy of GPG with a key already generated. (If you haven't generated a key yet, see this mini-HOWTO.) If the gpg binary is not in $PATH, you will have to set its location in Preferences → Package Settings → GPG.

On OS X, I recommend installing GPG using the Homebrew package manager: after installing Homebrew, run brew install gpg.

This plugin is now able to decrypt and verify binary encrypted documents if Sublime Text's encoding is set to 'Hexadecimal'. To set it, run the menu command File → Reopen with Encoding → Hexadecimal. Similarly, you can encrypt or sign a binary file so long as it is opened with the Hexadecimal encoding, though the output will still be ASCII armored. Currently, you must manually change the encoding away from Hexadecimal after running a GPG command.

Menu items added

• Preferences → Package Settings → GPG
• Tools → GPG → Decrypt
• Tools → GPG → Encrypt
• Tools → GPG → Sign
• Tools → GPG → Sign and encrypt
• Tools → GPG → Verify signature

Settings

• gpg_command: You may need to specify the full path if gpg is not in $PATH.

  Default: "gpg"

• homedir: Sets the GPG home directory to something other than ~/.gnupg. If empty, uses the default home directory.

  Default: ""

• verbosity: Valid values: 0–2.

  Default: 1

Flaws and limitations

• On Windows, the passphrase prompt does not hide the text entered: do not use this while someone is looking over your shoulder! Linux will also use an insecure passphrase prompt if zenity is not installed.

• Signatures can only be created with the default key (the first key in the secret key ring, or else the default specified in gpg.conf).