PGP

PGP does three jobs here. It checks signed posts, it hides your address from all but the vendor, and it locks your login so a stolen password is not enough. Set it up once.

gpg --full-generate-key
gpg --recipient VENDOR --armor --encrypt address.txt

Paste the result into your order so only the vendor can read it. Do it on your own machine. Then turn on PGP login in your account, so someone with your password still cannot get in.

Updated 2026-07-16