How to open .ASC files on Linux

To open .ASC files on Linux, open the file in a text editor or run a file-identification tool to confirm it is OpenPGP ASCII armor.

Step-by-step instructions

  1. Open the file in a text editor or run a file-identification tool to confirm it is OpenPGP ASCII armor.
  2. Use GnuPG from the terminal for common actions, for example: "gpg --import file.asc" for a key, "gpg --verify file.asc original-file" for a detached signature, or "gpg --decrypt file.asc" for an encrypted message.
  3. If using a graphical file manager, choose an installed OpenPGP-compatible application when prompted.

Alternative methods

  • Open .ASC in a browser-based viewer if desktop apps fail.
  • Try opening .ASC on Linux with a secondary app to rule out app-specific issues.
  • Convert .ASC only with trusted tools when direct opening is not possible.

Common issues

The file opens as a block of strange text

That is normal for ASCII-armored OpenPGP data. The text is an encoded key, message, or signature, not something a word processor can interpret meaningfully.

  1. Check the first line to identify the type, such as PGP MESSAGE, PGP PUBLIC KEY BLOCK, PGP PRIVATE KEY BLOCK, or PGP SIGNATURE.
  2. Use OpenPGP software for the correct action: import, decrypt, or verify.
  3. Do not edit and save the text unless you know what you are doing, because small changes can corrupt the data.

Signature verification fails

A detached .ASC signature must match the exact original file and requires the correct signer public key. Verification fails if the download changed, the wrong file is selected, or the key is missing or untrusted.

  1. Make sure you have both files: the original download and its matching .ASC signature.
  2. Import the signer's public key from a trusted source.
  3. Verify the signature against the original file, not against the .ASC file by itself.
  4. If verification still fails, re-download both files from the official source.

Decryption asks for a secret key or passphrase

An encrypted OpenPGP .ASC message can only be decrypted with the matching private key, and the private key may also be protected by a passphrase.

  1. Confirm that the message was encrypted to one of your public keys.
  2. Make sure the corresponding private key is available in your OpenPGP keyring.
  3. Enter the correct private-key passphrase when prompted.

A public key imports but is not trusted

Importing a public key only adds it to your keyring. It does not prove that the key really belongs to the person or project named in it.

  1. Compare the key fingerprint with a value published through a trusted channel.
  2. Do not rely only on the file name or email address shown in the key.
  3. Follow your OpenPGP tool's trust or certification workflow after verifying the fingerprint.

Security note

A .ASC file can contain a private key block. Treat any file beginning with "-----BEGIN PGP PRIVATE KEY BLOCK-----" as highly sensitive and do not upload, share, or import it on untrusted devices.

Back to .ASC extension page