PGP key

Last updated 17 October 2026

The key this project signs with, so a message claiming to come from us can be checked rather than believed.

The fingerprint

54D9 67C7 BDBD 6B5B 9E0A C3B2 BC3F EB14 596F 838B

Crypto Train · ed25519 · created 17 October 2026 · expires 16 October 2028 · no email address, deliberately

This is the only fingerprint this project uses. If you are shown a different one alongside our name, it is not ours — and the right response is to stop rather than to ask us about it through whatever channel showed you the key.

Why this page exists

Clone sites are a live problem in this corner of the market. The footer of every page here asks you to bookmark the address for that reason, and a bookmark protects you from reaching the wrong site — it does nothing about a convincing email.

A published key fixes the other half. Anything genuinely from this project can be signed with the key below, and a signature that verifies against this fingerprint could only have been made by whoever holds the private half. That is a stronger statement than a familiar sending address, which anybody can imitate.

It also gives you a way to tell us something sensitive. A stuck transfer, a security problem, anything you would rather not have sitting in plain text across two mail providers: encrypt it to this key and only the holder can read it.

What it is not

It is not an identity. This project operates pseudonymously and the key does not change that — it proves continuity rather than personhood. What it demonstrates is that two messages were signed by the same holder, which is the useful property, and it is the reason the about page argues that claims here should be checkable rather than taken on trust.

It is also not a promise that we will reach you first. We do not send unsolicited mail about transfers, we never ask for a private key or a seed phrase, and there is no circumstance in which we would ask you to move funds to a “safe” address. Anything that does is not us, signed or otherwise.

The key

Save it and import with gpg --import, or verify a signature with gpg --verify. Check the fingerprint above against what your tool reports after importing — a key is worth exactly as much as the fingerprint you compared it to.

Plan an exchange

No account, no sign-up, and nothing is held here — your browser pays each provider directly.

Questions about any of this? The source is the authority — everything described here can be checked against it.