gpg --gen-key
with maximum key sizegpg --output you@domain.tld.gpg-revocation-certificate --gen-revoke you@domain.tld
gpg --export-secret-keys --armor you@domain.tld > you@domain.tld.gpg-private-key
gpg --export --armor you@domain.tld > you@domain.tld.gpg-public-key
gpg --keyserver pgp.mit.edu --send-keys you@domain.tld
- Put everything in a save storage
- Copy
you@domain.tld.gpg-private-key
andyou@domain.tld.gpg-public-key
from your save storage gpg --import you@domain.tld.gpg-private-key you@domain.tld.gpg-public-key
shred --remove you@domain.tld.gpg-private-key you@domain.tld.gpg-public-key
gpg --import you@domain.tld.gpg-revocation-certificate
gpg --keyserver pgp.mit.edu --send-keys you@domain.tld
gpg --edit-key you@domain.tld
expire
set new date
save