Essential Security Measure

PGP 2FA is your best protection against phishing. Even if you accidentally enter credentials on a fake site, attackers can't complete login without your private key.

How PGP 2FA Works

1

You enter your username and password

2

Market encrypts a code with YOUR public key

3

You decrypt the code with your PRIVATE key

Enter the decrypted code to complete login

Prerequisites

  • ✅ Catharsis Market account
  • ✅ PGP key pair (public + private key)
  • ✅ GPG software to decrypt messages

Don't have a PGP key? Follow our PGP Guide first.

Step-by-Step Setup

Step 1: Log in to Catharsis

Access the market using a verified mirror link and log in with your credentials.

Step 2: Navigate to Security Settings

Go to Account → Settings → Security or Account → 2FA

Step 3: Enter Your Public Key

Paste your complete public key including headers:

-----BEGIN PGP PUBLIC KEY BLOCK-----
[Your public key content here]
-----END PGP PUBLIC KEY BLOCK-----

Step 4: Verify Ownership

The market will display an encrypted message. Decrypt it to get the verification code:

Terminal
# Save the encrypted message to a file
# Then decrypt:
gpg --decrypt message.asc

Step 5: Enter Verification Code

Enter the decrypted code in the verification field. Click Submit.

✓ 2FA Enabled!

From now on, every login will require you to decrypt a challenge code. Your account is now protected against phishing attacks.

Logging In with 2FA

  1. Enter username and password as normal
  2. You'll see a PGP-encrypted message on screen
  3. Copy the entire encrypted block
  4. Decrypt it with your GPG software
  5. Enter the decrypted code
  6. Access granted!

Troubleshooting

"Decryption failed" error
Make sure you're using the private key that matches the public key you registered. Check that you copied the entire encrypted message including the BEGIN/END lines.
Code expired or invalid
2FA codes are time-limited. If you took too long, refresh the page and try again. Also verify your computer's clock is accurate.
Lost my private key, locked out
Without your private key, you cannot pass 2FA. You may need to contact market support for account recovery, which may require identity verification.
⚠️
Backup Your Private Key

If you lose your private key, you lose access to your account. Store encrypted backups in multiple secure locations.