For encrypted mail, and for verifying that an onion address, a mirror or a message genuinely came from this desk.
-----BEGIN PGP PUBLIC KEY BLOCK----- mQINBGXQ9tYBEADFq7Zk3nJ2pQxV8mYtR4wLcHs1vB6dKgN0eSfA9jXuP3rTyMoW bE5cZlD8kIvHnQ7sXaF2gYpUrLmT4dOjB1wKxNcVeS6hJyAqZ3PtGuMfRbXlDnEo 7CkWvYzTqLpHsB4mNjR9dXfA2gVuIeKcQlZoP8yBtSrM3nWvJhDxUaF6LgTbCyOk 9ZpQmXeVdHnRjIsA7fBwGtUcLyKoP2NqEaZrTvMbS4xDlJhWnFgOiCkYuBeQzXpA mR7dTvLoNsWjHqIfEbGyXcUkAaPZ2VtMnDrJlBoQwSeKgFxCyThVdiPuNmRaLzOb XqEjWkAsHfB9GvTnCoMlYdIpZuReQxWmJbSkLtNaOgVhFcPyDzXiEuAqBrTnWoJm kSdLvIfHgZcYbXeQpAtRnMoUjWiFyBlDsKvGaTcNxPmZoRhEqJuLbWdSfAiOgYzX tCkVpNrMeQlBhDsIuFoAZjXcWyTgPmRnKbEvLdSqJaHfOiBwGtUcYlZpXrMnQdKe SvAoIbFjWtLmHgNcRyPxDzUkEaZqBoMlTnCiJdWfSgAhXvKpLrEyNbQmOoJuIcFz tGdVaWnRhSkPlBeYxTqMoAiZuJvCfLdNbXgErKmWpQsHyItFoAjZcRlBnDvTgUeK xPmSqLdWoIbHfAyNjXcVtGzEuRpQmKlBnSoJdWfAiCgYzXvTkEqLrMnOoHuIbFjW QARAQABtCthbnljaGFuZ2UuaW8gZGVzayA8ZGVza0BhbnljaGFuZ2UuaW8+iQI3 -----END PGP PUBLIC KEY BLOCK-----
Compare the fingerprint above against the one in the footer of any page, and against the signature on the onion address. If any of the three disagree, you are not looking at our site — stop and reach us on a channel you already had.
The fingerprint is the thing to check, not the key block. A key block is easy to substitute; a fingerprint you noted from a previous visit is not.
Mail to hello@anychange.io encrypted to this key is read by the desk and nobody else. Include your own public key if you want the reply encrypted; without it we will answer in the clear, which for anything transactional we would rather not do.
For anything time-sensitive use Signal or Threema instead. Mail is checked in business hours; the messengers are watched while the desk is open.
The key expires in February 2027 and will be rotated a month before, with the new key signed by this one. A key that appears without that chain of signature is not ours, however plausible the announcement looks.
It is published here and on the onion service. Keyservers are unauthenticated by design, so treat any copy found elsewhere as unverified until the fingerprint matches this page.
No. Agents do not hold desk keys. Anyone presenting a signature and claiming to be an agent is not one — agents are identified to you only through the marketplace listing and your collection code.
That is enough to verify a key you obtained elsewhere. Import the key, compare the fingerprint, and discard it if they differ.