diff --git a/Makefile b/Makefile
index 6d2929f..4c34ee4 100644
--- a/Makefile
+++ b/Makefile
@@ -48,4 +48,6 @@ release:
 
 sign:
 	VERSION=$$(git describe --tags | sed 's/^v//;s/-[^.]*$$//') && \
-	gpg --armor --detach-sign cwm-$$VERSION.tar.gz
+	gpg --armor --detach-sign cwm-$$VERSION.tar.gz && \
+	signify -S -s ~/.signify/cwm.sec -m cwm-$$VERSION.tar.gz && \
+	sed -i '1cuntrusted comment: verify with cwm.pub' cwm-$$VERSION.tar.gz.sig
diff --git a/cwm.pub b/cwm.pub
new file mode 100644
index 0000000..fd16529
--- /dev/null
+++ b/cwm.pub
@@ -0,0 +1,2 @@
+untrusted comment: portable cwm release key public key
+RWTdOib0PoIM0pmDAPnV2S9/AMRqTOVfTY/KAkFemdH13cqBDHdduTas