New in version 4.2.1
Fixes encrypting to a key by one of its extra identities. Multiple identities per key shipped in 4.2.0, but a mail client could only find a key by its primary address, so encrypting to a secondary identity failed to find the key. It now matches any identity on the key.
PGPony is an OpenPGP app for Android. Encrypt, decrypt, sign, and verify messages and files, manage your keyring, and use a hardware security key over NFC, all on device.
Features:
- Encrypt, decrypt, sign, and verify text and files
- Post-quantum encryption: ML-KEM-768 + X25519 (Kyber) composite keys, in both the IETF draft (v6) and LibrePGP / GnuPG 2.5 (v5) formats
- OpenPGP provider service: use PGPony as the crypto engine for Thunderbird for Android, K-9 Mail, and Password Store (OpenKeychain-compatible API)
- Generate modern keys, including RFC 9580 (OpenPGP v6) Ed25519 and X25519, with Argon2id passphrase protection
- Hardware security keys over NFC, including YubiKey 5 NFC and Token2, with on-card key generation, decrypt, sign, PIN management, and factory reset
- Read your password-store (pass) entries, including those protected by a hardware key
- Encrypted keyring backup and restore, including OpenKeychain backup import
- PGP/MIME email: decrypt messages with attachments, compose encrypted .eml
- Key discovery through WKD and the keys.openpgp.org verifying keyserver; optional Tor routing via Orbot
- Optional contact integration for choosing recipients
- QR import and scanning for keys
- Default signing key, biometric lock, and secure-screen protection
Post-quantum limitations:
Post-quantum OpenPGP is still being standardized, so cross-tool support is limited:
- LibrePGP-format (v5) keys interoperate with GnuPG 2.5+ today: messages encrypt and decrypt in both directions, and public keys import cleanly. GnuPG cannot yet import post-quantum PRIVATE keys from any app — it stores them in a proprietary internal format.
- IETF-format (v6) keys implement draft-ietf-openpgp-pqc and are verified against the draft's official test vectors, but current Sequoia (sq) preview builds implement a different draft revision and cannot read them yet, and GnuPG does not support this format at all.
- Classical keys (RSA, Ed25519, v4 and v6) are unaffected.
PGPony does not use accounts, ads, analytics, or tracking. The F-Droid build contains no Google services and runs fully on de-Googled devices.
The cryptographic core is published separately as open source (PGPonyCore-Kotlin), and the full app source is available under the Apache-2.0 license.
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
14 MiB
PGP Signature
|
Build Log
New in version 4.2.0
PGPony 4.2.0 adds the ML-KEM 1024 hybrid suite beside 768, multiple identities per key, subkey display and creation, per-key fallback decryption keys and signing defaults, and reorganized Settings. Files and bundles of any size now stream without crashes. Deleting keys and clearing data are heavily safeguarded. If you generated a 768 key before 4.2.0, the app will suggest regenerating it for gpg compatibility. Mail clients without v6 support need a classical signing default. iOS parity lands in
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
14 MiB
PGP Signature
|
Build Log
New in version 4.1.1
Fixes creating a key at a large display or font size. The onboarding slides could not scroll, so on phones set to a bigger display or font scale the Create Key button could sit below the screen edge with no way to reach it. The bundle encryption result and the biometric lock screen had the same missing scroll and got the same fix. Nothing changes at default display settings.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
control Near Field Communication
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers.
-
show notifications
Allows the app to show notifications
-
read your contacts
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge.
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.pgpony.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
14 MiB
PGP Signature
|
Build Log
