PGPony

byChar0n · Security & Privacy

Verified safeOpen source

Download APK

—

No reviews reviews

downloads

8.0

android

AI summary

OpenPGP tool for Android that encrypts, decrypts, signs, and verifies messages and files entirely on-device. Supports modern v6 keys, hardware security keys over NFC, and biometric lock. The FOSS build has no accounts, ads, analytics, or Google services. Version 4.2.1 fixes encryption to secondary identities on multi-identity keys when used with mail clients.

Generated by AI. May contain inaccuracies.

About this app

OpenPGP for Android. Encrypt, decrypt, sign, and verify messages and files, manage your keyring, and use a hardware security key over NFC, all on device.

PGPony has no accounts, no ads, no analytics, and no tracking. The foss build contains no Google services and runs fully on de-Googled devices.

Features

- Encrypt, decrypt, sign, and verify text and files - Modern key generation, including RFC 9580 (OpenPGP v6) Ed25519 and X25519, with Argon2id passphrase protection - Hardware security keys over NFC (YubiKey 5 NFC, Token2): on-card key generation, decrypt, sign, PIN management, and factory reset - Read-only password-store (pass) support, including hardware-key entries - Key discovery via WKD and the keys.openpgp.org verifying keyserver - Optional contacts integration, QR import and scanning - Biometric lock and secure-screen protection

License

Apache 2.0

open source encryption privacy offline security pgp

What's new

v4.2.1Aug 16, 2026

A point release fixing one bug in the multiple-identities feature that shipped in 4.2.0.
Fixed
Encrypting to a key by one of its additional identities now works. 4.2.0 added multiple identities per key, but a mail client resolves a recipient address through the OpenPGP provider, and that lookup matched only a key's primary identity. A message addressed to a secondary identity found no key, so the client would not offer to encrypt it. The provider now matches any identity on the key, across all three places it resolves an address: offering encryption, performing it, and reporting Autocrypt status.
Reported by bluemle with v6 ML-KEM-1024 keys. In-app encryption was not affected, since the recipient picker selects a key directly rather than by typing an address.