AgePony: Encrypt & Sign
Post-quantum file & message encryption with age. On-device, private, no ads.
新版本 4.1.0
AgePony 4.1.0 adds new lock options, clipboard auto-clear, QR public keys, and a safer private-key screen.
- Choose how the vault locks: biometric, your device PIN, pattern, or password, or no lock. A device with no fingerprint sensor can now unlock with the device credential.
- Copied keys and text clear from the clipboard after 60 seconds, even when AgePony is backgrounded.
- Show any public key as a QR code to share it.
- The private key screen blocks screenshots while a key is on screen.
- Choose how the vault locks: biometric, your device PIN, pattern, or password, or no lock. A device with no fingerprint sensor can now unlock with the device credential.
- Copied keys and text clear from the clipboard after 60 seconds, even when AgePony is backgrounded.
- Show any public key as a QR code to share it.
- The private key screen blocks screenshots while a key is on screen.
AgePony is a fast, private encryption app for your phone, built on the modern age encryption format. Lock your files and messages so only the right person can open them, sign them so recipients know the file really came from you, and keep your keys and data on your device. No accounts, no tracking, no analytics.
POST-QUANTUM ENCRYPTION
Protect your data against "harvest now, decrypt later" attacks. AgePony generates quantum-safe hybrid keys (ML-KEM-768 combined with X25519) that stay secure even against a future quantum computer, while staying fully interoperable with the age command-line tool. Anything encrypted to a quantum-safe recipient is clearly badged, so you always know the protection you are using.
Also included:
- Encrypt and sign in a single step, so recipients can both open your file and confirm it is really from you.
- A built-in migration tool to upgrade older files to quantum-safe encryption. Batch re-encrypt your existing files to a new quantum-safe key, with your originals kept until the new copy is verified.
WHY AGEPONY
- Standard age encryption. AgePony reads and writes the same format as the age CLI, so your files work with other age tools on desktop and server.
- Public key or passphrase. Encrypt to someone's public key, or lock a file with a passphrase you share separately.
- SSH signing, done properly. Sign and verify files from a dedicated Sign tab using SSH Ed25519 or RSA keys, a hardware key, or a security key over NFC, and keep a list of trusted signers. Signatures use the SSHSIG standard, so ssh-keygen verifies them.
- On device by default. Encryption, decryption, signing, and key generation all happen locally on your phone, and your private keys never leave your device.
- One optional online step. When you import a recipient from GitHub, AgePony fetches that person's public SSH keys from github.com. That is the only network request the app makes, it happens only when you tap Fetch, and nothing about you is sent.
- No tracking, no ads, no account required. AgePony does not collect analytics or personal data.
- Open source. The full source is available for review.
FEATURES
- Generate and store age key pairs in an app vault, unlocked with your device biometrics.
- Quantum-safe hybrid keys (ML-KEM-768 + X25519) alongside classic X25519 keys.
- Encrypt and decrypt files and text messages.
- Passphrase encryption for quick, key-free sharing.
- Sign and verify files (SSHSIG) with SSH Ed25519 or RSA keys, hardware keys, or a security key over NFC, with a trusted-signers list.
- Unlock with your biometric, a password, or a PIN, so the app works even with no screen lock set up.
- Optional duress password that wipes the vault when entered.
- Scan recipient keys with your camera by QR code.
- Import a recipient from a GitHub username, fetching their public SSH keys from github.com.
- Batch migrate existing files to quantum-safe encryption.
Whether you are a journalist, an activist, a developer, or simply someone who wants real control over their private files, AgePony gives you strong, standard encryption without the complexity.
AgePony is an independent app built on the open age encryption format and is not affiliated with the age project.
POST-QUANTUM ENCRYPTION
Protect your data against "harvest now, decrypt later" attacks. AgePony generates quantum-safe hybrid keys (ML-KEM-768 combined with X25519) that stay secure even against a future quantum computer, while staying fully interoperable with the age command-line tool. Anything encrypted to a quantum-safe recipient is clearly badged, so you always know the protection you are using.
Also included:
- Encrypt and sign in a single step, so recipients can both open your file and confirm it is really from you.
- A built-in migration tool to upgrade older files to quantum-safe encryption. Batch re-encrypt your existing files to a new quantum-safe key, with your originals kept until the new copy is verified.
WHY AGEPONY
- Standard age encryption. AgePony reads and writes the same format as the age CLI, so your files work with other age tools on desktop and server.
- Public key or passphrase. Encrypt to someone's public key, or lock a file with a passphrase you share separately.
- SSH signing, done properly. Sign and verify files from a dedicated Sign tab using SSH Ed25519 or RSA keys, a hardware key, or a security key over NFC, and keep a list of trusted signers. Signatures use the SSHSIG standard, so ssh-keygen verifies them.
- On device by default. Encryption, decryption, signing, and key generation all happen locally on your phone, and your private keys never leave your device.
- One optional online step. When you import a recipient from GitHub, AgePony fetches that person's public SSH keys from github.com. That is the only network request the app makes, it happens only when you tap Fetch, and nothing about you is sent.
- No tracking, no ads, no account required. AgePony does not collect analytics or personal data.
- Open source. The full source is available for review.
FEATURES
- Generate and store age key pairs in an app vault, unlocked with your device biometrics.
- Quantum-safe hybrid keys (ML-KEM-768 + X25519) alongside classic X25519 keys.
- Encrypt and decrypt files and text messages.
- Passphrase encryption for quick, key-free sharing.
- Sign and verify files (SSHSIG) with SSH Ed25519 or RSA keys, hardware keys, or a security key over NFC, with a trusted-signers list.
- Unlock with your biometric, a password, or a PIN, so the app works even with no screen lock set up.
- Optional duress password that wipes the vault when entered.
- Scan recipient keys with your camera by QR code.
- Import a recipient from a GitHub username, fetching their public SSH keys from github.com.
- Batch migrate existing files to quantum-safe encryption.
Whether you are a journalist, an activist, a developer, or simply someone who wants real control over their private files, AgePony gives you strong, standard encryption without the complexity.
AgePony is an independent app built on the open age encryption format and is not affiliated with the age project.
- 作者: NorseHorse
- 许可: Apache License 2.0
- 网站
- 问题跟踪系统
- 源代码
- 构建元数据
- 可重复性状态
版本
尽管下面提供了 APK 安装包的下载选项，但你应该注意，以这种方式安装将不会收到更新通知，这是一种不太安全的下载方式。 我们建议你安装使用 F-Droid 客户端。
下载 F-Droid-
arm64-v8aarmeabi-v7ax86x86_64该版本需要 Android 8.0 及以上版本。
此安装包由 F-Droid 构建并签名，且保证与此源代码 tarball 保持一致。
-
arm64-v8aarmeabi-v7ax86x86_64该版本需要 Android 8.0 及以上版本。
此安装包由 F-Droid 构建并签名，且保证与此源代码 tarball 保持一致。
-
arm64-v8aarmeabi-v7ax86x86_64该版本需要 Android 8.0 及以上版本。
此安装包由 F-Droid 构建并签名，且保证与此源代码 tarball 保持一致。
新版本 4.0.2
AgePony 4.0.2 fixes enrolling FIDO security keys.
- Newer security keys, including recent YubiKey firmware, were rejected during enrollment with a CTAP error and no PIN prompt. Keys are now enrolled the same way ssh-keygen does, so a single touch is enough and the error is gone.
- Newer security keys, including recent YubiKey firmware, were rejected during enrollment with a CTAP error and no PIN prompt. Keys are now enrolled the same way ssh-keygen does, so a single touch is enough and the error is gone.
新版本 4.0.1
AgePony 4.0.1 fixes crashes and rough edges from 4.0.0.
- Fixes a lock-screen crash after reinstalling or restoring the app from a backup; the vault now resets cleanly instead of failing to open.
- The vault no longer locks the instant you switch apps. A quick trip to another app keeps your place and any half-entered recipient.
- The keyboard now opens on its own when a password or PIN is needed.
- Fixes a lock-screen crash after reinstalling or restoring the app from a backup; the vault now resets cleanly instead of failing to open.
- The vault no longer locks the instant you switch apps. A quick trip to another app keeps your place and any half-entered recipient.
- The keyboard now opens on its own when a password or PIN is needed.