Protect Sensitive Information with PGP Encryption

This page explains how you or your current payment provider can encrypt your PCI sensitive token data for when you import data from another payment provider.

Before encrypting your data, make sure it is in the required format.

Requirements

Install GnuPG or other PGP software that lets you encrypt and decrypt files.

1. Obtain your PGP key

To encrypt your PCI sensitive data, you need a public key provided by Adyen. For improved security, we generate a merchant-specific PGP public key for you.

Reach out to our Support Team, and we will generate your key.

If your merchant-specific PGP public key doesn't work for you, consult your Adyen contact. As a last resort, we offer a generic public key.

2. Verify your PGP key

Your merchant-specific PGP public key is signed with our signing key. Before using the public key, check its signature to verify the authenticity.

Step 1: Download the signing key

You can use the signing key to verify the signature of your merchant-specific key.

Key ID: 33BA8DC9
Created: 2024-01-01
Expires: 2026-02-19

Download live signing key

Or copy the key below:


Copy code
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: BCPG v1.72.2
 
mQINBGWR8nABEACosnePxwjPlgY3EO1AHLvp3aJTlHfS4k2tRw4z995+Z0ZzzCw3
Y4t7sZ7dzhn7p1PumLj9iwaUk6tpCD2rnHT80FCCM6DxqbzUtuADRBF7MsO3Ao4d
I5r7Jfs6tuHyxK7KxNFs7Vg9Jqkabsjr/JFGLJXdbm5Yiez4rBeOz9sqhRQGEdK3
WddmJ9r3wVH9OS/PB8JkjZrjsPn6m6fcwtf+bu5P5ni+QG0AoD8hoAQpHkOVQnpw
1mmmbWNRv4yAnmtoWCohTw880extOjO6Mo6VkZdoxTFUojTWvpU/WdpPCI+Yxa+S
iZwXdnqJWDl8P9y7unppJmD9uAbT3RmKjot4CFHALX5jyAVFqPff/bQL7xpKNsT5
XOkDq2FBv8MEnzu/YL/Fa00F2lDAQ/TYgYPsrCm9Li7M6pmgj/0Ha5DoQlaoLx+R
S/Goc1X5rmef9rJCidUwH/O7Jy07mXyBL20AYcdn09n4+s196u2j+V9gulX2/PAy
uXctKZHintcN++BrTbbcEGBWis2W48xHKdkhcihMvBqjoGQil/tkWgpeNRS/qSyi
8kWgLcHsmOSUVAX4L5zTg5zypecd9V+Ktri1HMo9IgcLB6emc5FOf730GCubtsM6
Fxpnx7Bt/yr9xXDiGhy1ApK4bCLht8zOVmLx9vnRHv4BNi/kEkcVwKVTUwARAQAB
tBpBZHllbiBCLlYuIDxwZ3BAYWR5ZW4uY29tPokCPgQTAQIAKAUCZZHycAIbLwUJ
BARSAAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQjQ2uJTO6jckT7g//RGL1
6vSOB0yiGspnlMk9E1aQ6VlKkoU7rmABHjroeTE2Hekf4e6q6Vdwsuqq0tKUncr+
3mqfvigtxPpmELXzEIrmthdvv/WVcqXD27CevUpiFi/wNWyRmH5I9F/wPZLqNuAr
MwPxP0pkw3NlZ3PISvlNRNxzav2XZLuDjer1DKQvptnfnp+v6Pot1cnEHdet+vDr
CZZJPAFFNwHos0m7dsyatBWD/xZ59wN4K7iUV3rFk4hwT72QlvJwsn+ysWMHyYKa
Tt40UIdmp9nL3NzwQg+zSE/wa7ppyPye90/TcD5oYX7nP+CYK3pUAt6hatcB2HTq
hWg70v/OlOHICQqgWvSTXcdszRGz9Dn7P9KtqNPn7SLNga+aBIONxl5ERBc/Aj+z
87lTORLfkWU0J9h1PtRgL9EP5eqsRtDBGNIEyQa6bBoQmGtuuz7No2tWFk7CsxD5
4w4CwBfoA7IgT7MpU6etKQyB5POCawJvm65UBJ02DookUFgGZw2GpUGTkOXYw1yR
/k66T9ecvDyjstUWt9P+YZwKsvGyKi4w9l11DqJVvX1csUrIBC9/qR1m/3HkvIOA
pi278jWD2QlURbBd7Z2uobJoXmEK5O/9ceFv/WRBJxfpi+/nrq7jRMf/Vv31xIbQ
d3hVbRpTYDQs0zOr7TyBImFVgxUb7Wsk2puc6We5Ag0EZZHycAEQANxH1DF8oVqq
jKNpTxGMorE9rMduPYyTeZf8QHgzsi2mzYDFk6H5qzaLUe+NmhJrllj3vHFyCR68
DuSdx3rApORY7D7paTo5FTVek5GAyu4h2qMQb7Kojcq8gPAs2/o3FxHrytzixbRI
rS4MYK4Cp/vqsOC06XIiSbiKjb1L3amodYX9JhsNs1ZPVB5JFj+7/SqgHhUu1vmo
+FYbV6Gq3fi1wLLFh4qFrn2MqT8w4IEF+QRLuQtqcy0W1uVYfrl4nVU7W81tYimr
VHJVs0GQS4iWvFi9O9MLK5eagYOOI8eJy7TAHPIxy93sJQb8i0VGUMkADIHs/LaO
5EtNnScFkoGHaScRSStHBcqNBDOSnpkTMCWQ6DQUgDbD9DpEKF5SEV7+hnqldyUr
9cg19Ebfyzx9kFllEvLt/LwWpZO/mx8zX2gYfO3fhVi1XCBC6s9esM4PADbbQODy
y/wNa15wRTpnz8To+Gqw9xnLCeXPf5B5jrPQQ377pb/v4ZAezaVijzatpNJPrT0M
q/oBVv4/A4tdOgnMh9QDeaCqXjLeCVmW08bdkWLSl6ZB2b9/FNA11xQSEfUyGD2E
f8AtDlQW4YyWZehPC/tRGI3RUNCg2DhvMzzQjZRIcFLjDpXiIqVoI7M8aIJLhjKC
AR/jCfdl0jwTKIgKW1l0A+35dN8UKRvJABEBAAGJBEQEGAECAA8FAmWR8nACGy4F
CQQEUgACKQkQjQ2uJTO6jcnBXSAEGQECAAYFAmWR8nAACgkQhE9mam/IagwGpA/8
DvbdFCa4hOcfLA0JT8WlwNlM8rsBKNqTyGFFu4D1Oc4rhsGQYnkrgkCbjydLa3mP
GG896Gwi+/cKmHOXuqJxd1hMgE2q0lGxbZIPm3Xojc4gMeqdAoYpXdPckd8A/Cjb
VBkzxrW4dOo/VFAhOCTzbnwbqt5HqM59TR18sK0XAGO4838lVNmaAZhH5vAx9daU
/S5KHaAywgibU9DjY/IAOZSIyK/J+3wlVMpHo1Yv+8n7CJFDvFhbd71/wNs477Ju
S+8vGK2KlXsizO18Xy4FdtLy3xKWNnlXITeVECJVsjx9l1/YwBnzF7rDoddfdVEJ
2bcCHOLBIZk7AGaHJaQz83/wYK5U5bO9ElYlFtzSfeFLJ8HAvrWnKvfXGSFl7wqQ
eE9+fQLtpP7DIgkV06HdA/6n/Xfdcz7PDe8Z6K1bjk7xCvjfOmRj3I0+WTyRJULd
sCUsMxQsUcr+CX6auYsi+oz9i/3elzBrtBh/odXznad3Sb+uq17+iYi1URwSNXJr
GYtKWXL4UgfbvCbyfaZ+7BZGlhwp6iSICyv9a0q/ru0BtJ3B113m25G175HDHCU3
rdEKRVsCi96DJe2MdWUKpaZCQiHOBmZEdDCRjRLlBB8HWNLmmP+qKEcciVq3Yu9h
Qj2KsW/T+xeJ+EfgPVWiFuem4owkZ0SLsiLIkkxH1+tjDw//c9fh27LI5YzwDISf
fFTW9mWgNgR5Y4vZbqYbPx8+ei8d3OjZB/TghJ3cUmPOKww//fYgT45cVzy2n6hv
PidQv5AUyaXAUeIDHP+jR6VNn7oFkAUf+QhTyQX5h4HMBM4i4ETsoihJtK8v0neX
sHqVK3+tUCxLWA6qEMUafjnFDcQawPb1eA6EfvEH5bk2fHHHEuU+SGC8lrGARCld
tr7McXOboZGR88EWXNb7ofVf9zNiiPZapu6fuMIRuQCIP3A8Au02yD/uYRMyggGH
D10T+ZOZ9WjrZRB2+XnAel8vOnAHTCzdRdypzPtd0IZjh3c7OP2kfuFTH4wC3IYu
sHOcICrQXh+GNzp8MlS4AmHAX9m5sxQWxUq1NvwM7dTViXTTDyfSxig7BBIAbeVV
7Iwl29shZikcANM8J5lq4ZKkpr0/ALcEuE3dzt2dW7iHCZx1xEutH5SmsaKZW8Mt
CnM35qCxXTJ/48rgiAAV395UiikD8bgO2cc4hf4poLAjfjc6Sn1nC92So7sepIO4
MYMkoBT/ulUYtlHVPgc8WoGaIbr6L5MIhKG0RnobCL3sBcCUxRzHWAD7GwdpKo5X
YrLW2VfJkbHzOQhTkaWuubnCIvQk79MLy//VAWpjiKCXcHNsQOjYMCv/Et2XicqQ
FWbyQaIuPCSiQXjtHkUR1+YCZGk=
=BMpW
-----END PGP PUBLIC KEY BLOCK-----

Step 2: Verify the signature of your public key

Verify whether your merchant-specific public key was signed with the relevant Adyen signing key.

Here's how to do so using the GnuPG command-line interface:

Place your merchant-specific public key (MerchantEncryptionKey.asc) and the relevant signing key (for example AdyenSigningKey.asc) in the same directory.

From the directory that contains both keys, create a temporary keychain and import both keys:


Copy code
gpg --no-default-keyring --keyring ./tempPubKeyRing.gpg --import ./AdyenSigningKey.asc ./MerchantEncryptionKey.asc

Check that both keys are present in the keychain:


Copy code
gpg --no-default-keyring  --keyring ./tempPubKeyRing.gpg --list-keys --keyid-format SHORT

The output should list both keys. For each, the following properties are listed:

pub: the public key ID, used for encrypting messages.
uid: the user ID.
sub: the 'subkey' ID, used for signing or encryption.

Verify the signature of your public key, using its public key ID (pub):


Copy code
gpg --no-default-keyring  --keyring ./tempPubKeyRing.gpg --keyid-format SHORT --check-sigs <your public key's pub ID, e.g. "34B82244">

The output lists your public key's properties. Check that the first line that starts with sig! references the subkey (sub) value of the signing key. If it does, your public key is authentic and safe to use.

3. Encrypt sensitive information

Use your verified public key to encrypt PCI sensitive files that you send to Adyen.

Here's how to do so using the GnuPG command-line interface:

If you haven't already, create a keychain and import your merchant-specific public key (./MerchantEncryptionKey.asc):


Copy code
gpg --keyring <keychain-filename> --no-default-keyring --import ./MerchantEncryptionKey.asc

Replace <keyring-filename> with the desired filename for your keychain.

Encrypt the file using your merchant-specific public key:


Copy code
gpg --encrypt --recipient <your-merchant-specific-public-key-id> --keyring /path/to/your/<keyring-filename> <file-to-encrypt>

Replace <your-merchant-specific-public-key-id> with the ID of your public key.
Replace /path/to/your/<keyring-filename> with the path to your keyring filename.
Replace <file-to-encrypt> with the path to the file you want to encrypt.

Generic public key

The generic public key is used only as a fallback. Consult your Adyen contact before using it.

Name: Adyen Product Security Key 2023
Email: product_security_key (at) adyen.com
Comment: For CHD and other critically secret data
Created: 2023-11-08
Expires: 2027-11-07

Key ID: 2F5E0351
Length: 4096
Algorithm: RSA
Fingerprint: 868A EBB2 E284 5CAC E9EB B75E 20FB 37AE 2F5E 0351

Download Public Key