# info > APT-SECURE

---
type: CommandReference
command: apt-secure
mode: man
section: 8
source: man-pages
---

## Quick Reference

- `apt-key add keyfile.asc` — Add a trusted key for repository authentication
- `apt-get update` — Update package index with signature verification
- `apt-get install package` — Install packages from authenticated repositories
- `apt-get --allow-insecure-repositories update` — Force update from insecure repositories (not recommended)
- `gpg --clearsign -o InRelease Release` — Create a signed InRelease file for a repository
- `gpg -abs -o Release.gpg Release` — Create a detached signature for Release file
- `apt-ftparchive release .` — Generate a Release file for a repository

## Name

apt-secure — Archive authentication support for APT

## Synopsis

(Not a command; see [apt-get(8)](https://manpages.debian.org/apt-get.8), [apt-key(8)](https://manpages.debian.org/apt-key.8), and [sources.list(5)](https://manpages.debian.org/sources.list.5) for related commands.)

## Options (Configuration)

- `Acquire::AllowInsecureRepositories` — Set to `true` to downgrade errors to warnings when a repository has no valid Release file. Per-repository override via `allow-insecure=yes` in `sources.list(5)`.
- `Acquire::AllowDowngradeToInsecureRepositories` — Set to `true` to allow a previously authenticated repository to become insecure during an update. Per-repository override via `allow-downgrade-to-insecure=yes` in `sources.list(5)`.
- `Trusted` — In `sources.list(5)`, set to `yes` to disable all warnings for an insecure repository (use with extreme caution).
- `Signed-By` — In `sources.list(5)`, restrict which key(s) are allowed to sign a given repository.

## See Also

- [apt-get(8)](https://manpages.debian.org/apt-get.8)
- [apt-key(8)](https://manpages.debian.org/apt-key.8)
- [sources.list(5)](https://manpages.debian.org/sources.list.5)
- [apt.conf(5)](https://manpages.debian.org/apt.conf.5)
- [apt-ftparchive(1)](https://manpages.debian.org/apt-ftparchive.1)
- [debsign(1)](https://manpages.debian.org/debsign.1)
- [debsig-verify(1)](https://manpages.debian.org/debsig-verify.1)
- [gpg(1)](https://manpages.debian.org/gpg.1)
- Debian Security Infrastructure chapter (ch7): <https://www.debian.org/doc/manuals/securing-debian-howto/ch7>
- Strong Distribution HOWTO: <http://www.cryptnet.net/fdp/crypto/strong_distro.html>