PGPKit

pgp for your phone

PGP that works with everyone else’s.

Encrypt, decrypt and sign OpenPGP messages on iPhone and Android, readable by GnuPG, Thunderbird and Proton Mail. No account, no servers, no analytics.

Get it on Google Play iPhone · coming soon to the App Store

No Google Play on your phone? Download the APK.

-----BEGIN PGP MESSAGE-----
Comment: Made with PGPKit

wVQDCmBm32Lp2HUZmo3YE3q8bpDHrqQjSuBj/Kf8AxZ6dP6kldyJBcccQDEp
CXi7c4Edi3R/oE0J53oxt6aMS9ohfNvhYT2rZ5irGQhfSQe1GKIgCKbSWQHw
eQQMKTnZtPNAl8SDwGAXHKnVC9FXEMs4j81wxqLayyF6OHTPv8xggO07/l0y
FgjDK5cGkWwxBfDk6xYgcaQr/RHQqc/y6JzBS6uZN1rIZOyf22tUIL3L
=wJqK
-----END PGP MESSAGE-----

interop

Tested against four other OpenPGP implementations.

Every build round-trips keys, messages and signatures through each of these, live, in its test suite. A message PGPKit sends is one they can read, and the other way round. Keys it creates are standard OpenPGP v4, the version GnuPG reads.

IMPLEMENTATIONWHAT USES ITCHECKED
GnuPGgpg on Linux, macOS and Windows; Kleopatra; most mail plug-ins✓ every build
RNPThe OpenPGP engine inside Mozilla Thunderbird✓ every build
GopenPGPThe OpenPGP engine inside Proton Mail✓ every build
Sequoiasq, and a growing number of Linux tools✓ every build

paste anything

Mail-app damage, repaired

Paste a message as it arrived. Stray quote marks, broken line endings and extra spaces are fixed, and PGPKit works out whether it is a message, a signature or a key.

errors

Says what went wrong

Not “decryption failed”, but which key the message was encrypted to, whether the passphrase was wrong, or whether the file was damaged on the way, and what to do next.

backups

Your key is never the only copy

A new key goes straight to a backup, protected by a passphrase you choose and checked by opening it again before you save it. GnuPG can restore it too.

unlock

Face or fingerprint instead of typing

Optionally keep a key unlocked behind Face ID, Touch ID or your fingerprint, in the phone’s secure hardware. Never synced, never backed up, and you choose how long.

privacy

Nothing to collect

No account, no analytics, no ads, no crash reporting. Keys never leave the phone unless you export them. The one-line “Made with PGPKit” note turns off in a switch.

languages

Eight languages

English, Deutsch, Français, Español, Italiano, Português, 简体中文 and 繁體中文, using the same words GnuPG and Kleopatra use in each.

screens

The Keys tab, listing your key and a correspondent’s, each with its fingerprint.
keys
Encrypting a message to Charles Babbage, also to yourself, signed as Ada Lovelace.
encrypt
A decrypted message with a green Good signature panel naming the signer.
decrypt
Backup verified: the backup was reopened with your passphrase before saving.
backup

pgpkit pro

One purchase. No subscription.

Pro adds tools for making more. Everything you need to read and keep your own data stays free: decrypting, verifying, importing, backing up and restoring.

  • More than one identity of your own
  • Encrypting files over 10 MB
  • Standalone signature files
  • Printed paper backups
  • Finding a key by email address
  • The packet inspector
  • NIST P-256, P-384 and RSA 4096 keys