Verify Onisin Software with GPG

We publish a public signing key so you can verify that the installer you downloaded is authentic and unmodified.

1. Download the Onisin Public Key

Download the key from the official Onisin website and keep it locally.

Public key file: onisin.asc

Tip: Save it in your Downloads folder.

2. Install GPG

If you already have GPG installed, you can skip this step.

Install via Homebrew:

brew install gnupg

Alternatively: Install a GUI bundle such as GPGTools.

3. Import the Key

Import the downloaded onisin.asc into your local GPG keychain.

From your Downloads folder:

cd ~/Downloads && gpg --import onisin.asc

Show imported key details:

gpg --fingerprint "onisin"

4. Verify an Installer

Each installer has a corresponding signature file next to it with .gpg.sig appended. Download both files, then verify.

Example:

  • <INSTALLER_FILE> (e.g. Onisin_2026.1.12_aarch64.dmg)
  • <SIGNATURE_FILE>.gpg.sig (e.g. Onisin_2026.1.12_aarch64.dmg.gpg.sig)

Verify command:

gpg --verify <SIGNATURE_FILE>.gpg.sig <INSTALLER_FILE>

If everything is correct, you should see:

gpg: Signature made ...
gpg:                using RSA key <KEY_ID>
gpg: Good signature from "onisin <info@onisin.com>"

onisin.com

© 2026 Onisin Crypto Software — All rights reserved.