How to use export keys from Protonmail, Keybase, and Mailvelope and load onto OnlyKey
Edit me

OpenPGP Support

OnlyKey uses the same standard OpenPGP keys used by popular services like Protonmail, Keybase, and Mailvelope. If you already have a key with one of these you can export the private key and load it onto OnlyKey. OnlyKey uses this loaded key for encrypted messages and files (see WebCrypt) and can use this key for secure backups of your OnlyKey (see secure backups).

Exporting Keys


Step 1. If you do not already have a Keybase account. Follow the instructions in the Generating Keys guide to generate your private key.

If you already have a Keybase account go to your account and next to your key ID select edit -> Export my private key from Keybase.
Step 2. Follow the instructions here to load key onto OnlyKey


Step 1. Follow the instructions in the Protonmail knowledge base here to Download your private key
Step 2. Follow the instructions here to load key onto OnlyKey


Step 1. Go to the Mailvelope extension key management tab and select ‘export’ -> select ‘private’ -> select ‘save’.
Step 2. Follow the instructions here to load key onto OnlyKey

Loading Keys

Step 1. Open the text file of your private key that you downloaded in the previous steps in a text editor. Select all of the text of the private key (CTRL+A), and copy the text (CTRL+C).
Step 2. Click on the Keys tab of the OnlyKey App.
Step 3. Put the OnlyKey into config mode doing the following
  • Ensure OnlyKey is unlocked
  • Hold the 6 button down for more than 5 seconds, and then release, you will see the light turn off.
  • Re-enter your PIN, you will see the OnlyKey LED fade in and out continuously (Red if OnlyKey Color) while in config mode.
Step 4. Paste the copied private key into the RSA Private Key box. Ensure Auto is selected as Slot, enter the same passphrase you used with Keybase, Protonmail, or Mailvelope. When finished select Save to OnlyKey

You should see a message displayed indicating the key was successfully saved to OnlyKey.


Some PGP/GPG keys contain legacy settings or values not supported by OpenPGP. These keys are not compatible with OnlyKey. The OnlyKey app uses OpenPGP.js to parse PGP keys, if you experience an error it may be that the PGP key is not compatible with OpenPGP.js. An additional troubleshooting step that can be done is to try importing key in another OpenPGP.js application such as Mailvelope.