Updated GPG Signing key for Warp Linux Releases

Due to precautionary measures from a security incident last week, we recently rotated our GPG signing subkey which we use to sign some of our Warp Linux artifacts.

We have no evidence of misuse by unauthorized parties but we’re doing this out of an abundance of caution.

Follow the instructions below to get our updated public key.

Ubuntu / Debian (if using our package repo)

wget -qO- https://releases.warp.dev/linux/keys/warp.asc | sudo gpg --dearmor --yes -o /etc/apt/trusted.gpg.d/warpdotdev.gpg

sudo apt update

If you configured our apt repository manually (following our docs) instead of installing the .deb, the key is at /etc/apt/keyrings/warpdotdev.gpg; use that path instead.

Arch

sudo pacman-key -r "linux-maintainers@warp.dev"
sudo pacman -Syu

Fedora 43 and newer

Import the updated key, then upgrade. Fedora 43's rpm updates the existing key in place, so there is nothing to remove first:

sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc
sudo dnf upgrade warp-terminal

Fedora 42 and older, RHEL, CentOS, Rocky, AlmaLinux

Remove the old key before importing the new one. Importing while the old key is still installed can appear to succeed without changing anything.

sudo rpm -e --allmatches gpg-pubkey-d60f803f-65c9382c
sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc
sudo dnf upgrade --refresh warp-terminal

openSUSE / SLE

Remove the old key before importing the new one. Importing while the old key is still installed can appear to succeed without changing anything. Then refresh zypper and update:

sudo rpm -e --allmatches gpg-pubkey-d60f803f-65c9382c
sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc
sudo zypper refresh && sudo zypper update warp-terminal

Verify the key

Our public key is published at https://releases.warp.dev/linux/keys/warp.asc. To check its fingerprints:

wget -qO- https://releases.warp.dev/linux/keys/warp.asc | gpg --show-keys --with-subkey-fingerprints

• Primary key (unchanged): 0913 165C 78D5 B7A4 1B42 AC65 7FF7 AB39 D60F 803F
• New signing subkey: D272 B58E 4BF4 EA3E 7CB9 58A5 5AC0 1A19 A09F A9A6, expires 2028-10-29
• Revoked signing subkey: 19A1 E427 461B 1795 F73F 6296 31F4 254A FE49 E02E