Complete tutorial for creating your DrugHub marketplace account
Before registering on DrugHub marketplace, you must have: 1) Tor Browser installed and configured, 2) A 4096-bit PGP keypair generated, 3) Basic understanding of PGP encryption/decryption. DrugHub uses passwordless PGP authentication, making your private key the only credential for account access.
DrugHub requires 4096-bit PGP keys for registration. Install GnuPG on your system. Open terminal and generate keys:
gpg --full-generate-key
Select RSA (4096-bit). Use a strong passphrase to protect your DrugHub private key. Set expiration to 2-5 years. Never use real name or identifying email for DrugHub keys.
DrugHub registration requires your public PGP key. Export it with:
gpg --armor --export your@email.com > drughub_public.asc
Open drughub_public.asc file. Copy entire contents including BEGIN/END headers. This is what you'll upload to DrugHub marketplace during registration.
Open Tor Browser and navigate to verified DrugHub onion URL. Always verify URLs through multiple sources before accessing. Click "Register" or "Create Account" on DrugHub homepage. The DrugHub marketplace registration page will request your public PGP key.
Paste your entire public PGP key into the DrugHub registration form. Include BEGIN/END PGP PUBLIC KEY BLOCK headers. DrugHub extracts your key fingerprint as your unique account identifier. No username or password required on DrugHub marketplace.
DrugHub implements CAPTCHA to prevent automated bot registrations. Solve the CAPTCHA challenge to prove you're human. If CAPTCHA fails repeatedly, try accessing DrugHub from different Tor circuit. Submit registration form after completing CAPTCHA verification.
DrugHub presents encrypted challenge message for authentication. Copy the PGP-encrypted text block. Decrypt using your private key:
gpg --decrypt challenge.txt
Paste decrypted code into DrugHub login form. This proves you possess the private key matching registered public key. You're now logged into DrugHub marketplace!
Your DrugHub private PGP key is the ONLY way to access your account. Store encrypted backups in multiple secure offline locations. Never upload private key to cloud services or email it. If you lose your DrugHub private key, account recovery is impossible. The DrugHub marketplace cannot reset PGP authentication.
If someone obtains your DrugHub private key, they have complete account access. They can make purchases, access messages, and steal escrowed funds. The DrugHub official policy provides no recourse for compromised private keys. Generate new keypair and create new DrugHub account if key security is ever questionable.
Set PGP key expiration for 2-5 years when creating DrugHub keys. Before expiration, generate new keys and create new DrugHub account. The DrugHub marketplace doesn't support key rotation for existing accounts. Plan ahead for key expiration to avoid losing access to your DrugHub account.
Now that you're registered on DrugHub, learn how to use the marketplace safely and effectively.