Help & troubleshooting

Download the extension .zip and unzip it. In Chrome open chrome://extensions, enable Developer mode, click Load unpacked and select the folder. Pin the DiscordPGP icon next to your address bar.

Go to discordpgp.com, sign in with Discord and choose Generate my key. Your keypair is created in your browser; the private key downloads as discordpgp.key and your public key registers. Then open the extension popup and Load key with that file.

No, by design. We never see or store your private key, so we cannot recover it. Generate a new key and load it; messages encrypted to the old key stay unreadable, new ones use the new key.

Check three things: the popup shows Encrypt my outgoing messages ON; a key is loaded (fingerprint visible); and you reloaded the Discord tab after installing. The console logs [DiscordPGP] active BUILD vX.Y.Z. If the version is wrong, remove and re-add the unpacked folder.

You can only decrypt messages encrypted to your key. Both people need DiscordPGP active in the same channel when the message is sent, and your private key must be loaded on this machine.

✓ Signature verified: proof the message came from the claimed sender, unaltered. ⚠ Invalid: content doesn't match the signature, so treat it as forged. Unsigned: sent by an older version, encryption intact but no authenticity proof. See the protocol page.

DiscordPGP doesn't automate your account. It encrypts what you were going to send and posts a normal message. That said, client modifications are against Discord's ToS in the strictest reading, as with any extension. Use your judgement.

Only ciphertext and metadata (sender, recipients, timing). Content is encrypted in your browser before storage and only recipients' private keys can decrypt it. See the full threat model.