# PGP signature problem **URL:** \ **Category:** Support\ **Created:** [January 26, 2026, 8:29pm UTC](https://bisq.community/t/pgp-signature-problem/13470 "2026-01-26T20:29:11Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![yusuf](https://bisq.community/letter_avatar/yusuf/32/5_5575768a8748004e209b776fc1b2916d.png) [@yusuf](https://bisq.community/u/yusuf)\ **Post date:** [January 26, 2026, 8:29pm UTC](https://bisq.community/t/pgp-signature-problem/13470/1 "2026-01-26T20:29:11Z")
HI i recently install bisq but im stuck with verification process, the siteweb “bisq” give’s me an old key: the one of “Alegandro Garcia” but it expired. So I find the public key of Henrik janssen but this time I needed the appropriate PGP signature for this public key, but I can’t find it on the official website and no one is talking about it. Even ChatGPT can’t help me… ---
**Author:** ![MnM](https://bisq.community/user_avatar/bisq.community/mnm/32/257_2.png) [@MnM](https://bisq.community/u/MnM)\ **Post date:** [January 27, 2026, 6:53am UTC](https://bisq.community/t/pgp-signature-problem/13470/2 "2026-01-27T06:53:56Z")
Bisq 1.9.22 was signed with [E222AA02](https://github.com/bisq-network/bisq/releases/download/v1.9.22/E222AA02.asc). [E222AA02](https://github.com/bisq-network/bisq/releases/download/v1.9.22/E222AA02.asc).asc is in the assets at [Release v1.9.22 · bisq-network/bisq · GitHub](https://github.com/bisq-network/bisq/releases/tag/v1.9.22) Details are at the wiki, but keys may vary between versions [https://bisq.wiki/Downloading\_and\_installing#Bisq2\_specific\_instructions](https://bisq.wiki/Downloading_and_installing#Bisq2_specific_instructions) ---
**Author:** ![yusuf](https://bisq.community/letter_avatar/yusuf/32/5_5575768a8748004e209b776fc1b2916d.png) [@yusuf](https://bisq.community/u/yusuf)\ **Post date:** [January 27, 2026, 8:14am UTC](https://bisq.community/t/pgp-signature-problem/13470/3 "2026-01-27T08:14:17Z")
I see that this pgp signature: [Bisq-64bit-1.9.22.exe.asc](https://github.com/bisq-network/bisq/releases/download/v1.9.22/Bisq-64bit-1.9.22.exe.asc) and your provided signature: [E222AA02](https://github.com/bisq-network/bisq/releases/download/v1.9.22/E222AA02.asc).asc are both emitted at the 24 december 2025 on the github page, but I’m afraid to use two signatures that don’t have the same syntax. I know it’s absurd. Could you tell me why the second signature is correct when the first one is the one that appears first on the official Bisq installation website? ---
**Author:** ![yusuf](https://bisq.community/letter_avatar/yusuf/32/5_5575768a8748004e209b776fc1b2916d.png) [@yusuf](https://bisq.community/u/yusuf)\ **Post date:** [January 27, 2026, 8:20am UTC](https://bisq.community/t/pgp-signature-problem/13470/4 "2026-01-27T08:20:24Z")
So you confirm that this: [E222AA02](https://github.com/bisq-network/bisq/releases/download/v1.9.22/E222AA02.asc).asc is the real PGP signature of the key: Henrik Janssen that I previously certified; because if we are talking about the same thing, the pgp signature is needed to verify after the certification process, Is everything okay for now (because I previously use the first pgp signature: “[Bisq-64bit-1.9.22.exe.asc](https://github.com/bisq-network/bisq/releases/download/v1.9.22/Bisq-64bit-1.9.22.exe.asc)” and “kleopatra” give’s me an error and inform me that the first pgp signature is incorrect) ? ---
**Author:** ![suddenwhipvapor](https://bisq.community/user_avatar/bisq.community/suddenwhipvapor/32/3291_2.png) [@suddenwhipvapor](https://bisq.community/u/suddenwhipvapor)\ **Post date:** [January 28, 2026, 6:42pm UTC](https://bisq.community/t/pgp-signature-problem/13470/5 "2026-01-28T18:42:23Z")
maybe you get the error because the key you downloaded is expired, search for E222AA02 on any pgp directory and add it to your system ---
**Author:** ![yusuf](https://bisq.community/letter_avatar/yusuf/32/5_5575768a8748004e209b776fc1b2916d.png) [@yusuf](https://bisq.community/u/yusuf)\ **Post date:** [January 29, 2026, 7:52pm UTC](https://bisq.community/t/pgp-signature-problem/13470/7 "2026-01-29T19:52:33Z")
I am very confused, and I am not good with computers, but please, I just want to have the PGP signature for the Henrik Janssen public key. It has not expired because I certified it on Cleopatra. The pgp Bisq-64bit-1.9.22.exe.asc and E222AA02.asc do not work. ---
**Author:** ![suddenwhipvapor](https://bisq.community/user_avatar/bisq.community/suddenwhipvapor/32/3291_2.png) [@suddenwhipvapor](https://bisq.community/u/suddenwhipvapor)\ **Post date:** [January 30, 2026, 8:54am UTC](https://bisq.community/t/pgp-signature-problem/13470/8 "2026-01-30T08:54:30Z")
first you have to import the signing key which is E222…, then you verify the bisq…exe.asc, better if it’s in the same path as bisq…..exe, that’s the procedure, if you use kleopatra you should follow the GUI, otherwise I do it via gpg in linux shell ---
**Author:** ![yusuf](https://bisq.community/letter_avatar/yusuf/32/5_5575768a8748004e209b776fc1b2916d.png) [@yusuf](https://bisq.community/u/yusuf)\ **Post date:** [January 30, 2026, 3:32pm UTC](https://bisq.community/t/pgp-signature-problem/13470/9 "2026-01-30T15:32:18Z")
So I restart the process and I reinstalled the public key of henrik Jannsen, and I tried to “uncrypt/verify” the public key with the official pgp signature of bisq 1.9.22, wich is: Bisq-64bit-1.9.22.exe.asc. This is the error message: The file The file C:\Users\yusuf\Downloads\387C8307.asc contains certificates and cannot be decrypted or verified. ---
**Author:** ![suddenwhipvapor](https://bisq.community/user_avatar/bisq.community/suddenwhipvapor/32/3291_2.png) [@suddenwhipvapor](https://bisq.community/u/suddenwhipvapor)\ **Post date:** [February 10, 2026, 9:57pm UTC](https://bisq.community/t/pgp-signature-problem/13470/10 "2026-02-10T21:57:17Z")
sorry for late reply, but have you checked this already? > **[Verify the signature of the binary you downloaded - Downloading and installing -...](https://bisq.wiki/Downloading_and_installing#Verify_the_signature_of_the_binary_you_downloaded)** > > With the install-file.exe and signature-file.exe.asc in the same directory, double-click on the .exe.asc file. Since I am on linux, I just use gpg commands and I am not familiar with kleopatra anymore