keybase / keybase/keybase-issues

`keybase login` incorrectly implies that one needs to upload one's private key to keybase.io

Open
#2,001 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

(Old title: "`keybase login` requires upload of private key to keybase?" -- see comments.)

Am I reading this correctly that I am required to upload my _private key_ to keybase in order to log in locally? This is pretty weird. GPG is installed and working, and the gpg agent was even unlocked for one attempt at this (no effect).

```
$ keybase login
How would you like to sign this install of Keybase?

(1) Use an existing device
(2) Use a paper key
(3) Use my Keybase passphrase
(4) Use GPG
Choose a signing option: 3
Your keybase username or email address: timmc
▶ ERROR in Login

Sorry, you have a PGP private key that Keybase doesn't have a copy of.
You need to prove you're you. Any of these will unlock this computer:

- reset your account and start fresh: https://keybase.io/#account-reset
- install GPG and put your PGP private key on this machine and try again
- go back and provision with another device or paper key
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing `keybase login` with the signing choices shown in the issue, especially the GPG path and the resulting error. Trace where these prompts and errors are assembled; done means the login flow clearly explains the local-key requirement without implying that a private key must be uploaded to Keybase.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.