Key exchange

Figure's public PGP keys for encrypted files, and how SSH keys work for SFTP.

View as Markdown

On this page· 3 sections

SSH keys authenticate SFTP connections. PGP keys encrypt files. These keys are not interchangeable.

Only exchange public keys with Figure. Never share a private key.

PGP keys for encryption#

PGP encryption is required for Data Export files.

Files sent to you: Provide your organization's public PGP key to Figure. Figure encrypts the files with that key, and your organization decrypts them with the matching private key.
Files sent to Figure: Encrypt the files with the Figure public PGP key for the correct environment. Figure decrypts them with the matching private key.

Coordinate your public-key exchange with your Figure contact. Keep the corresponding private key within the organization that created it.

Figure public PGP keys#

Copy the Figure test public PGP key

Figure test public PGP key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=HGKg
-----END PGP PUBLIC KEY BLOCK-----

Copy the Figure production public PGP key

Figure production public PGP key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=7c87
-----END PGP PUBLIC KEY BLOCK-----

SSH keys for SFTP#

SFTP requires SSH-key authentication; password authentication is not supported.

Partner-hosted SFTP: Figure provides you with its public SSH key. Add that key to the SFTP user's authorized keys on your server. When Figure connects, it uses the matching private key to authenticate; no password is used.
Figure-hosted SFTP: You provide your public SSH key. Figure authorizes it on the server, and you connect with the matching private key.

Coordinate the public-key exchange with your Figure contact during onboarding. Keep the corresponding private key within the organization that created it.