:: DEFENSE_MATRIX
OPSEC DOCTRINE
1. The Golden Rule: Isolation
Your darknet identity must never intersect with your real-life identity. Do not use the same username you use on Reddit, Telegram, or Discord. Do not tell your friends what you are doing. The weakest link in any security system is the human element.
2. How to Install Kleopatra (Windows/Tails)
Kleopatra is the standard PGP certificate manager. It is essential for 2FA on Nexus.
- Download Gpg4win from the official site (gpg4win.org).
- Run the installer. Ensure "Kleopatra" is checked in the component list.
- Launch Kleopatra. Click File -> New Key Pair.
- Choose "Create a personal OpenPGP key pair".
- Enter an alias (NOT your real name). Check "Protect the generated key with a passphrase".
- Finish. You now have a PGP key ready for the market.
3. How to Configure Tor Network Bridges
If your ISP blocks Tor (common in university campuses or restrictive countries), you need Bridges to bypass censorship.
- Open Tor Browser. Click the "Hamburger" menu (≡) -> Settings.
- Go to the Connection tab.
- Under "Bridges", click "Request a bridge from torproject.org".
- Complete the CAPTCHA. Tor will automatically configure the bridge (usually obfs4).
- Restart the browser. Your traffic now looks like random noise to the ISP.
4. How to Verify PGP Signature of a Mirror
Before entering your password, you must verify you are on the real site. Phishing sites look exactly like the real Nexus but steal your coins.
- Import the Nexus Market public key into Kleopatra.
- On the login page, copy the "PGP Signed Message" block starting with
-----BEGIN PGP SIGNED MESSAGE-----. - In Kleopatra, click "Notepad", paste the text, and click "Decrypt / Verify".
- If the signature is valid (Green Bar), the site is real. If it is red/invalid, CLOSE THE TAB IMMEDIATELY.