> For the complete documentation index, see [llms.txt](https://docs.devarmor.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devarmor.com/getting-started/single-sign-on-sso-authentication/encrypting-credentials-for-devarmor.md).

# Encrypting Credentials for DevArmor

## Encrypting credentials for DevArmor (PGP)

When you send DevArmor sensitive values, for example, your Okta **Client Secret** when enabling SSO, encrypt them to our PGP public key first so they're never transmitted in plaintext.

### Our public key

* **Identity:** `DevArmor Integrations <integrations@devarmor.com>`
* **Fingerprint** (verify this matches before you trust the key): `54DC 69B7 9814 3F17 DE9A 8C4E 86CF 68A8 35EB 2EC0`

<details>

<summary>Public key block:</summary>

```
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=Xh+O
-----END PGP PUBLIC KEY BLOCK-----
```

</details>

### How to encrypt and send

Using the GPG command line:

1. Save the public key block above to a file (e.g. `devarmor-integrations.asc`) and import it:

   ```sh
   gpg --import devarmor-integrations.asc
   ```
2. Confirm the fingerprint matches the one listed above:

   ```sh
   gpg --fingerprint integrations@devarmor.com
   ```
3. Put your Okta **org domain, Client ID, and Client Secret** in a file (e.g. `creds.txt`) and encrypt it:

   ```sh
   gpg --encrypt --armor --recipient integrations@devarmor.com creds.txt
   ```

   This produces `creds.txt.asc`.
4. Email **`creds.txt.asc`** to **<integrations@devarmor.com>**. We enable SSO routing for your organization and confirm by email.

Prefer a GUI? [GPG Suite](https://gpgtools.org/) (macOS) or [Kleopatra](https://www.openpgp.org/software/kleopatra/) (Windows/Linux) can import the key and encrypt with a few clicks.