Keybase

Keybase is a cryptographic identity and secure communication platform that links cryptographic keys to verifiable online identities across social media platforms. Users prove they control specific online accounts (Twitter, GitHub, Reddit, websites) by publishing signed proofs, creating a verified cross-platform identity network.

For OSINT investigators, Keybase's identity verification system is valuable for confirming that accounts across different platforms belong to the same person and for verifying the authenticity of public-key holders. When a subject claims to be the same person on multiple platforms, Keybase proofs provide cryptographic evidence of that cross-platform identity claim.

The public key infrastructure on Keybase allows investigators to associate PGP keys found during investigation with verified online identities. If a PGP key retrieved from a dark web forum or encrypted communication matches a Keybase profile, that profile's linked accounts provide additional intelligence about the key's owner.

Cross-platform identity verification through Keybase proofs is particularly useful for investigating pseudonymous individuals who have verified their cross-platform identity for reputation reasons — a common practice in the security research community, cryptocurrency space, and open-source software development. These voluntary verifications create investigative links between pseudonymous online personas and verifiable platform accounts.

Keybase team features allow investigation of organizational communication — teams on Keybase may reveal membership connections between individuals that are not evident from their individual profiles.

For encrypted evidence handling, understanding Keybase's cryptographic architecture helps investigators assess the reliability of identity claims based on cryptographic verification versus self-reported association.

Keybase profiles are publicly accessible without account registration. The public API allows programmatic queries for user data and key lookups.

Document any Keybase profiles queried, linked platform verifications found, public keys retrieved, and query timestamps for investigation records.