New in version 4.7.1
Opening the full text of a long message could freeze PGPony on slower phones; the full text now loads only what is on screen. Security keys with ECDSA keys (secp256k1 and the NIST and brainpool curves) can sign: PGPony passed the card's signature on in the wrong encoding. Card keys on those curves are labeled by their real curve, and scanning the card again corrects an entry stored with the wrong label.
PGPony brings real OpenPGP encryption to Android, with post-quantum cryptography and hardware security key support. Generate PGP keys, then encrypt, decrypt, sign and verify messages and files on your device. No account, no server, no tracking. Fully compatible with GnuPG (GPG), OpenKeychain and other OpenPGP tools.
NEW: Pairing with PGPony Desktop, SSH login with your PGP keys, and post-quantum ML-DSA signatures.
▌POST-QUANTUM ENCRYPTION
- Quantum-resistant ML-KEM-768 and ML-KEM-1024 (Kyber) composite encryption keys
- Post-quantum ML-DSA-65 and ML-DSA-87 (Dilithium) signatures on OpenPGP v6 keys
- IETF standard format, plus the LibrePGP format GnuPG 2.5 uses
- Protects your messages from "harvest now, decrypt later" attacks
▌EMAIL, PASSWORDS AND SSH
- OpenPGP provider for Thunderbird for Android, K-9 Mail and FairEmail
- A modern successor to OpenKeychain: same API, actively maintained
- You approve every connected app and can revoke any of them in Settings
- Read your pass (password-store) entries, including ones on a hardware key
- SSH login with a PGPony key through an ssh-agent in Termux
▌HARDWARE SECURITY KEYS
- Use a YubiKey, Token2 or other OpenPGP smartcard over NFC or USB
- Your private key never leaves the hardware; the PIN confirms every operation
- Generate keys on the card, sign, decrypt and encrypt-and-sign; optional PIN caching
- Change PINs and reset the card; KDF-protected PINs supported
▌PGP KEY MANAGEMENT
- Generate Ed25519, RSA, OpenPGP v6 or post-quantum key pairs
- Import and export armored keys; add subkeys and User IDs; set expiry; revoke
- Encrypted keyring backup and restore, including OpenKeychain backups
▌ENCRYPT, DECRYPT, SIGN
- Encrypt text or files for one or many recipients
- Verify signatures with a clear verified-signer badge
- PGP/MIME email: decrypt messages with attachments, compose .eml
▌OPENPGP V4 + V6 + PQC COMPATIBILITY
- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign
- AEAD-OCB authenticated encryption and Argon2id key protection
- Byte-exact GnuPG interoperability, tested on every release
▌EASY KEY EXCHANGE
- Share your public key as a QR code, file or text; scan to import
- Import a key from a link and check its fingerprint before adding it
- Key server and Web Key Directory (WKD) lookup, including keys.openpgp.org
- Pair with PGPony Desktop (macOS, Windows, Linux) or another phone
- Autocrypt support and a built-in contacts list
▌PRIVACY BY DESIGN
- Encryption runs 100% on your device: no account, no telemetry
- Offline mode turns off every network feature
- Route key server traffic through Tor with Orbot
- Private keys in encrypted storage backed by Android Keystore
- Optional biometric lock, fingerprint-to-sign and auto-clearing clipboard
▌WHO PGPONY IS FOR
- Journalists, researchers and activists handling sensitive information
- Thunderbird, K-9 Mail and FairEmail users who need a crypto provider
- Developers and sysadmins using PGP for code signing, releases or SSH
- GnuPG users who want a mobile companion, or an OpenKeychain replacement
- Anyone who wants encryption that stays private in the quantum era
▌WHY PGPONY
Most "secure messaging" apps ask you to trust their servers. PGPony doesn't need any. Your keys are generated and stored on your device and never leave unless you share them. If you use GnuPG on the desktop, you already know PGPony. New to PGP? It's built to be the easiest place to start.
▌OPEN SOURCE
- Apache-2.0 licensed, with the OpenPGP core published as its own library
- Reproducible builds: anyone can check the release APKs against the source
- Free, with no ads and no in-app purchases
▌PRIVACY COMMITMENT
PGPony does not collect, store or transmit any personal data. No account system, no tracking SDKs. Full privacy policy: pgpony.app/privacy
Made by an indie developer in Alabama. Questions or requests? Tap Send Feedback in the app, or write NorseHorse@norsehor.se.
Donate
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
run foreground service with the type "specialUse"
Allows the app to make use of foreground services with the type "specialUse"
-
hide other apps overlays
This app can request that the system hides overlays originating from apps from being shown on top of it.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
11 MiB
PGP Signature
|
Build Log
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
run foreground service with the type "specialUse"
Allows the app to make use of foreground services with the type "specialUse"
-
hide other apps overlays
This app can request that the system hides overlays originating from apps from being shown on top of it.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
11 MiB
PGP Signature
|
Build Log
New in version 4.6.4
Nitrokey 3 security keys now work over USB: PGPony read only the first part of longer replies from the key and showed a meaningless error. Recently Deleted shows how many days each key has left. PGPony now appears once in the share menu. Make Primary no longer shifts Revoke and Remove on User ID rows, and the subkey Revoke instead button matches the key delete sheet.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
hide other apps overlays
This app can request that the system hides overlays originating from apps from being shown on top of it.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
10 MiB
PGP Signature
|
Build Log
