diff --git a/Brewfile b/Brewfile
index 683e1387..9b0d9886 100644
--- a/Brewfile
+++ b/Brewfile
@@ -13,6 +13,7 @@ brew "fzy"
 brew "git"
 brew "git-delta"
 brew "git-standup"
+brew "gpg"
 brew "hugo"
 brew "imagemagick"
 brew "isync"
@@ -27,6 +28,7 @@ brew "pandoc"
 brew "par"
 brew "pass"
 brew "pianobar"
+brew "pinentry-mac"
 brew "rename"
 brew "ripgrep"
 brew "rust"
diff --git a/fish/.config/fish/config.fish b/fish/.config/fish/config.fish
index 89d39e7d..749cfe7b 100755
--- a/fish/.config/fish/config.fish
+++ b/fish/.config/fish/config.fish
@@ -25,6 +25,14 @@ if test -n "$NVIM_LISTEN_ADDRESS"
   end
 end
 
+# GPG agent
+if test -f "$HOME/.gpg-agent-info"
+  . "$HOME/.gpg-agent-info"
+  set GPG_AGENT_INFO
+  set SSH_AUTH_SOCK
+end
+set GPG_TTY (tty)
+
 if not functions -q fisher
   set -q XDG_CONFIG_HOME; or set XDG_CONFIG_HOME ~/.config
   curl https://git.io/fisher --create-dirs -sLo $XDG_CONFIG_HOME/fish/functions/fisher.fish
diff --git a/gnupg/.gnupg/gpg-agent.conf b/gnupg/.gnupg/gpg-agent.conf
new file mode 100644
index 00000000..237a0afb
--- /dev/null
+++ b/gnupg/.gnupg/gpg-agent.conf
@@ -0,0 +1,5 @@
+pinentry-program /usr/local/bin/pinentry-mac
+default-cache-ttl 600
+max-cache-ttl 7200
+debug-level basic
+log-file $HOME/.gnupg/gpg-agent.log
diff --git a/gnupg/.gnupg/gpg.conf b/gnupg/.gnupg/gpg.conf
new file mode 100644
index 00000000..b93b36bc
--- /dev/null
+++ b/gnupg/.gnupg/gpg.conf
@@ -0,0 +1,6 @@
+ask-cert-level
+use-agent
+keyserver keys.fedoraproject.org
+auto-key-retrieve
+no-emit-version
+default-key D81A4957BAF06BCA6E060EE5461C015E032EF9CB
diff --git a/gnupg/.gnupg/scdaemon.conf b/gnupg/.gnupg/scdaemon.conf
new file mode 100644
index 00000000..1d0a8929
--- /dev/null
+++ b/gnupg/.gnupg/scdaemon.conf
@@ -0,0 +1 @@
+reader-port "Yubico YubiKey OTP+FIDO+CCID"