Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I created and published a Public Key using gpg.

I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become any less secure?

share|improve this question

I'm not expert, but I don't think there is any risk involved. Your gpg password is used to unlock your private key only. Your public should not contain any elements that can lead to your password.

share|improve this answer

Ditto what Jeroen said. There's no technical issue here. The public key is a public document and there's no way anyone can derive from it the passphrase for your private key.

I will insert the usual warning here about using the same passphrase for more than one system, however. I wouldn't say it was a huge consideration here, since you're likely to keep both of the above passphrases very strong and safe; but if you're also using the same one for gmail/twitter/gawker/facebook etc., then your encryption is as weak as the weakest point in all of their collective password security systems.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.