The way you phrase the question makes me wonder if you are not quite using GPG properly (ie: encrypting files that contain messages? why not just encrypt the message itself). There is no reason to save the plaintext, gpg --d , paste ciphertext, enter password, it displays the plaintext and doesn't save it anywhere. If you are worried about swap your best option is to just encrypt it with a random key.