Verify GPG Signatures for Electrum [ Mobile]

Verify Authenticity is essential when it comes to your wallet , most wallet already suggest downloading from play store and AppStore but some wallet brought about additional verification to identify genuine wallets [like Electrum & sparrow wallet among others ].

While many might have heard about this process , some might still find it challenging to do that especially on their mobile phones, so I thought of bringing a Guide to show how to do it on our mobile devices, specifically Androids..

I will be using Electrum as it recommends and provides it , supports mobile devices and that's what we need.

First step :
* Download the Electrum app and the signature file from the official website: https://electrum.org/#download

^{screenshot showing}

* Download ThomasV public key , you can find it here : https://raw.githubusercontent.com/spesmilo/electrum/master/pubkeys/ThomasV.asc
It's available on the site at the "How to verify GPG signature " section.

Second step :
* Download and install Termux from Play store or Github( recommended, check the Notice for each release to understand)

Third step :
* Open termux and run

Code:

pkg update && pkg upgrade

To update and upgrade your installed packages

^{screenshot showing}

** It will ask for confirmation to add and upgrade packages , to accept use the capital letter "Y " as stated

^{screenshot showing}

** Then run :

Code:

pkg install gnupg

to install gnupg package
Check installation success using :

Code:

gpg --version 
Or 
apt show gnupg

The command should return current installed version if the installation was successful

^{screenshot showing}

Fourth step :
* Grant termux storage permission manually form your device settimgs, you can also undo it when you're done incase you're concerned leaving the permission enabled .
Alternatively you can run :

Code:

termux-setup-storage

to initiate the permission process
* Next, change your current directory to where the files are stored(Electrum,Signature, ThomasV pub key ). to do that use

Code:

cd <the path to storage folder>

In my case I could easily access it through "storage/downloads "

^{screenshot showing}

Tip : use -command < ls > [as in ls without <>] to see the list of file/ folder in your current directory, this could help with identifying the paths to follow while navigating
This was the list showing the files available in my current directory when I run "ls"

^{screenshots showing}

Fifth step (Verification) :
* Import the ThomasV.asc using:

Code:

gpg --import ThomasV.asc

* Next verify the Fingerprint using :

Code:

gpg --fingerprint ThomasV

this should be the result :

^{screenshot showing}
* You can compare it with the finger print you will find in this video https://youtu.be/hjYCXOyDy7Y?si=Or0wIQAZqxRODcSg, got this from the official site as well
Here's a screen shot :

^{screenshot showing}

you will notice the keys matched with the result I got from the -command" gpg --fingerprint ThomasV" matched which means the key is valid.

* Next, run

Code:

gpg --verify <downloaded signature file name> <downloaded Electrum application  name>

To verify the application is genuine
Here was mine :

^{screenshot showing}

You would notice I got one of the response to be :

Quote

gpg: Good signature from "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" [unknown]

Which means the signature is verified.. and now I can go ahead with installing my Electrum wallet app.

For those that might be interested in the Desktop version:
https://bitcointalk.org/index.php?topic=5240594.msg54223763#msg54223763

Corrections and additions are welcome.