diff --git a/.gitignore b/.gitignore
index 9c9b44c..0819586 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /bemenu-442d283.tar.gz
 /bemenu-0.2.0.tar.gz
 /bemenu-0.3.0.tar.gz
+/bemenu-0.3.0.tar.gz.asc
diff --git a/bemenu.spec b/bemenu.spec
index 6fd67f2..3135831 100644
--- a/bemenu.spec
+++ b/bemenu.spec
@@ -7,11 +7,14 @@ Summary:    Dynamic menu library and client program inspired by dmenu
 License:    GPLv3+ and LGPLv3+
 URL:        https://github.com/Cloudef/bemenu
 Source0:    %{url}/archive/%{version}/%{name}-%{version}.tar.gz
+Source1:    %{url}/releases/download/%{version}/%{name}-%{version}.tar.gz.asc
+# Created with: gpg --export-options export-minimal --armor --export 0CBD2CD395613887
+Source2:    pgpkey-0CBD2CD395613887.asc
 
 Patch:      0001-Mark-global-wayland-constant-extern.patch
 
-BuildRequires:  cmake
-BuildRequires:  gcc
+BuildRequires:  gnupg2
+BuildRequires:  cmake gcc
 BuildRequires:  pkgconfig(cairo)
 BuildRequires:  pkgconfig(ncursesw)
 BuildRequires:  pkgconfig(pango)
@@ -34,6 +37,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release}
 Development files for extending %{name}.
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %autosetup -p1
 
 %build
@@ -69,6 +73,7 @@ Development files for extending %{name}.
 %changelog
 * Fri Feb 07 2020 Jan Staněk <jstanek@redhat.com> - 0.3.0-3
 - Fix declarations of wayland globals (https://github.com/Cloudef/bemenu/pull/86)
+- Enable GPG verification of source signatures
 
 * Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.3.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
diff --git a/pgpkey-0CBD2CD395613887.asc b/pgpkey-0CBD2CD395613887.asc
new file mode 100644
index 0000000..665f62f
--- /dev/null
+++ b/pgpkey-0CBD2CD395613887.asc
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQENBF2y3GIBCADqmro4L2UvW3uRtr9/U0RqPya0ixVtviYxbIB1mdZHU+r083ry
+GbyE09DZaLAV6JLW0+hZnxeaLaJmC5GoqpwGO0ylrLx4O922t96yAHMIt0zVaQVH
+fO/kRpOWylIfJAm+jeRhoypvhZ1PatXDnW961J2liPceRT9lhDoIIGzEl9h81xyS
+2KLnVyBVu8lviVZYHflecLon9HkmjD8i6ALrG04RJd2J9tMYMMtH6SLwlH4xYok4
+oraDUjtu8rtAuTDlDX9UXajnDHhEPAqWv52+KvAzJYT42upPXYJ/+sx1kFQ/Jz+I
+ql2wqQKogB81r1cfcFNP07TWFl00p9JAKhoZABEBAAG0JEphcmkgVmV0b25pZW1p
+IDxtYWlscm94YXNAZ21haWwuY29tPokBVAQTAQgAPhYhBAjINh6CX3UCeX6HTwy9
+LNOVYTiHBQJdstxiAhsDBQkDwmcABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJ
+EAy9LNOVYTiHXOQH/3pbqiHVoQUu9pPMdkWqdzbfqxFSCQKs/0nkBOrO6CqVQ/sx
+QEBkiD2webxvwdHT1ZbqYZLcdaO2RlqVF81F5V1HpWA2MiJphp7qcKT2Nrtd81UE
+z9tzGGNpKM1KxM7hz3v32dyISzkF61c9W6znSRYCVQPPSWTQxLAm1+6DQxYMiXgV
+r2hHyvHaTp9kX2wz/gxDHb3LR2C+t09OHMTXA4204NKcDTC9eyN5x01JaVocyITN
+E5aTmU8F3EGvn8yNLWzGEuUAK9sKTyBK6IOr78q9TzmKhsiWAOSkkh5jXJPRvQCK
+P7fDbWbbonKtvKdCRxXHMzOrDWzSSnV50hukxEu5AQ0EXbLcYgEIANn9hUywOrUH
+1GifXEn0JvR7p2a2hquh3QpNzn+wNXlFaZndgqCpfyxGuLsjx94hlSTJ2pzdkLZt
+JYokXKT7US40pl9rgZnNdmA8zQx6xHXbwf3HpMAj0E5XZf2ZZdpTxivJpA4GSLPV
+swQl1xKq0DDk5oJTFYGD1ndmYfAfWQk61Ltob9CGUG/h7o+eALhesRsss0pS6kL8
+nIoq97zUDfvee4P3SzGBkpkM+yBQ/Akrp5ijBrRERrVxRXi6AwoIvtlpNmdwHSHD
+1Mc0cv7Y0I9xWL5onbiTf/p4c+ihK4moXNRWuzUC45rU4ya8hHIEwUasf1UMMTpw
+NyGmtM1hirsAEQEAAYkBPAQYAQgAJhYhBAjINh6CX3UCeX6HTwy9LNOVYTiHBQJd
+stxiAhsMBQkDwmcAAAoJEAy9LNOVYTiHsbAIAK4Jiv+Clwujv7k+/Bjb/llzUfnP
+AgYZfVbKeDARuOQt5Z1uuOvDHHHAdc+UgiXJWzjg42JIFiSzxkK+Q+EWFMvZvH4i
+X/f0IdffZ/QQgzeCUXn4mPuAHOaJmV26r+cNBuqVtCs67PeK3zPCQVoWvEIHEdiZ
+uadyFOuyjhUbNCJzXWgKJj+sn6jHLENBeLFCVQBn6TTK1l7BpQUqPIpzcH6ou3/m
+IKgx+0Ef0FqcPelpgq2Yr7L97YIvXRKUhH3DFgMS7tjwVHwUItr1Se0uiVOClICR
+uSBvzfwFfKHARoFLjL+mhkBXBx+ht+dVlE1SIq+40A5I2C0kTvuCc43bK3c=
+=ads8
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/sources b/sources
index 29697cf..b397d05 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (bemenu-0.3.0.tar.gz) = 7e68d11954517f41c9669055c28b375c4f13ddfee8aae6a8e67c3282fe9118229d9ab072dc5e264e4204803b1a5ab715c6a5c9565ad4b7436cc172b9e455c05b
+SHA512 (bemenu-0.3.0.tar.gz.asc) = 6dc57d496d879299c33f416722550d904c4327171a9d466eb65b85e444e163934bf9b07b0f1f138951ccb5b040ebf632898009919ae724855847b6cb88464a76