I'm using Seahorse on Ubuntu, and I found that using the 'export secret key' option allows me to save an unencrypted *.asc file containing my GnuPG private key, with neither root access nor the password used to secure the key. I cannot change the picture or other settings for the key without entering that password.
I am very new at this, but it seems to be a security risk. How can I configure my key so it can't be exported at the click of a button?
Best Answer
It's not a security risk. The only vulnerability you are ;). You have to make sure that does not get your private key into the wrong hands.
Everyone who has access to your system and has sufficient access rights, can copy your key. Seahorse can not prevent that, too.
Encrypt your partitions and use a sufficiently strong password for your user account. Lock your system when you leave your workstation. Made sure that your backups are encrypted.