Why detached instead of clearsigned?

Clearsign wraps the content with the signature, which means the file is no longer the original. Detached keeps the file byte-identical — useful when downstream tools need the original (binary releases, archives, etc.).

Can I sign a file without ever loading it?

No — the signature is over a hash of the file, so the tool needs to read the file to compute the hash. The file is not transmitted anywhere; the read happens locally.

What is the .sig vs .asc extension?

Both work. .sig is binary-format signature; .asc is ASCII-armored. PGP Tool produces ASCII-armored .sig files by default — readable, copy-paste-safe, and what most upstream verification scripts expect.

Does the verifier need the original file?

Yes. Detached signatures only confirm a file matches; they do not contain the file itself. Send both the original and the .sig.

How is this different from Notary?

Notary creates a self-contained certificate with the hash, timestamp, and signature in one block. Detached Sign produces a standard OpenPGP signature file — useful for tooling compatibility (curl/sha256sum/gpg --verify workflows).

Firma separada

Crea y verifica firmas PGP separadas para cualquier tipo de archivo. 100% en el cliente.

Todo se ejecuta en tu navegador: sin servidor, sin rastreo.