# minisign

16 Hacker News commenters recommended minisign and 5 criticized it, November 2025 to November 2026. It was recommended in 5 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Simple, boring tool for signing files, praised as a cleaner alternative to PGP and recommended for signatures. Critics note it lacks trust inheritance and fits poorly with commit signing.

## Why people recommend it

- Simpler and more boring than PGP (2 comments): "much neater stack that does basically everything I would need to use PGP for" ([source](https://news.ycombinator.com/item?id=46472418)) "Boring, simple, fit-for-purpose." ([source](https://news.ycombinator.com/item?id=46473451))
- Reliable for everyday signing (2 comments): "Signal/WhatsApp for messaging, age for file encryption, minisign for signatures, etc." ([source](https://news.ycombinator.com/item?id=46404448)) "Ssh/age/minisign just work for my use cases." ([source](https://news.ycombinator.com/item?id=47148225))
- Adopted in professional environments (2 comments): "more professional environments have integrated age and minisign than have integrated PGP" ([source](https://news.ycombinator.com/item?id=45921710)) "also sequoia, minisign and age" ([source](https://news.ycombinator.com/item?id=46403766))

## What people warn about

- Affected by several GnuPG vulnerabilities (3 comments): "discovered multiple vulnerabilities in cryptographic utilities, namely in GnuPG, Sequoia PGP, age, and minisign" ([source](https://news.ycombinator.com/item?id=46454543)) "minisign was affected by most everything GnuPG was, but had a faster turnaround to patching." ([source](https://news.ycombinator.com/item?id=46472053)) "minisign was also vulnerable in the gpg.fail exposures" ([source](https://news.ycombinator.com/item?id=46472352))
- Lacks trust and human-factor solutions (2 comments): "Minisign and Age entirely dodge the actually hardest problem with humans using cryptography" ([source](https://news.ycombinator.com/item?id=45921676)) "The 4 tools you've listed all lack any notion of trust inheritance" ([source](https://news.ycombinator.com/item?id=45932375))

## Cite as

Hacker Approved, "minisign", https://hackerapproved.com/p/minisign/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).