Bitcoin Forum

I'm a new electrum user just now installed on windows desktop download from  https://electrum.org/#download site some electrum users complained Fake Wallet Attack https://cointelegraph.com/news/electrum-faces-another-fake-wallet-attack-users-reported-to-lose-millions-of-dollars

official electrum Warning message

so how to verify GPG signatures?

First of all, this question was answered before a good number of times. You should have been searching for the answer.

Now, the steps are described here: https://bitcoinelectrum.com/how-to-verify-your-electrum-download/
Edit: this may also be of help: https://bitcointalk.org/index.php?topic=5130429.0

thank you NeuroticFish but why could not determine https://imgur.com/FTHMLGQ ?

From what I see, I think that you've imported ThomasV signature.

I don't know what you've done next. You should have then downloaded the installer and the signature for the installer (in https://electrum.org/#download at the right side of the installer).
Also you may have to make sure that the signature file ends with .asc, not with .asc.txt
And then decrypt/verify this signature file.

You need to verify that you have the correct software before you install it on your computer. If I understood correctly you have already downloaded the software and you are now looking to verify it. Just remember that for the future. Verify before installing and especially before making any transactions.

It is important that you verify downloaded files before installation, so if files are not genuine you will prevent possible infection of your computer, which eventually leads to the loss of your coins.

I google error OP is getting, and there are many results that go back up to ten years in past, but it's not clear exactly what causes this error. Maybe it's a combination of GPG4Win and specific versions of the operating system (Windows in this case).

Maybe OP is make some wrong step which is resulting in this error, here is video tutorial: https://www.youtube.com/watch?v=lCG3c8a7HZI

Like Lucius said, search engines display many links with those error results but no clear description how to fix it except running Kleopatra through the console/cmd.
Are you sure you followed this guide step by step? https://bitcoinelectrum.com/how-to-verify-your-electrum-download/

It worked for me every single time. Do it exactly as described in the tutorial.

Can the gentlemen tell me that in the Electrum 3.3.8 desktop version the recipient address changes after each transaction?
Do I see this well?

Yes, it's a privacy enhancement. You can reuse old addresses. Go to 'View -> Show Addresses' and you should see 'Addresses' tab where you will find all of your addresses, including the already used ones.

 thank you very much BitCryptex

I've seen that error before, and I think it was answered correctly by NeuroticFish.


By default Windows wants to save the signature as a .txt file.  If the OP doesn't have Windows explorer set to show extensions of known file types it will look like it has ".asc" as the extension.  The OP needs to make sure the extension is actually ".asc" for the signature file to decode the signature correctly.  

Thanks everyone can not complete all task  all step similar problem trying selected all file one by one all file error notification.
can not find ".asc"  file installer file.

Pmalek,
Electrum in the meantime installed that site https://electrum.org/#download
sorry verified to the file.

Each line with installer/binary has the corresponding signature file.

https://talkimg.com/images/2023/05/14/blobcc4ab7104283fea8.png

And of course you have to take a look where you save them (or use Save As)


If you have troubles seeing the file extensions, look at tutorials like this one https://www.itsupportguides.com/knowledge-base/windows-7/windows-7-how-to-display-file-extensions/

thanks enable hide file show old file delete download new file  https://imgur.com/R9Ekq5w signature save text file so missing ".asc" sorry if wrong.

What are those new text documents that are visible in the picture?
Right Click on the corresponding signature file and Save Link As.
It should download a file named electrum-3.3.8-setup.exe.asc and not a new text document. Don't rename the file. I am not sure what you are doing wrong.

He must have copy-pasted the result when he click on the signature link to a new txt file.

Alternatively, you can rename those .txt files into the name of your downloaded executable + ".asc".
Based from your screenshot: Rename "New Text Document.txt" into "electrum-3.3.8-setup.exe.asc".

I'll work just fine as long as the contents are the same.

NeuroticFish, Pmalek &  nc50lc so helped me at the last time done verified Electrum 3.3.8 https://imgur.com/WiO7Sqc notification masses.

So Can I use Electrum 3.3.8 freely now?

Yes, that's a "good" result, it's safe to use that installer.
The underlined certificate (blue) is ThomasV's.

That's what matters in that message:


It means the signature matches with the certificate (from Thomas Voegtlin, Electrum's dev) you got earlier.

Generally you learn how to do things like basic file handling before you get into cryptocurrency.

The verification succeeded and the results show that you downloaded a legit wallet. Don't worry about the part that says "The data could not be verified".
This is how it would look if you downloaded a fake wallet with a different signature.
Notice the Bad Signature and Invalid Signature notification.

https://bitcoinelectrum.com/files/2019/01/invalid-sig.jpg