diff --git a/build/gpg-keys.txt b/build/gpg-keys.txt
new file mode 100644
index 0000000..b108728
--- /dev/null
+++ b/build/gpg-keys.txt
@@ -0,0 +1,9 @@
+# GPG Keys to Import for Package Verification
+# Format: URL or keyid (for default keyserver)
+# Lines starting with # are comments
+
+# Spotify
+https://download.spotify.com/debian/pubkey_C85668DF69375001.gpg
+
+# 1Password (Agilebits PGP code signing key)
+3FEF9748469ADBE15DA7CA80AC2D62742012EA22
\ No newline at end of file