PGPony
Encrypt, decrypt and sign with OpenPGP. Post-quantum keys and security keys.
新版本 4.7.1
Opening the full text of a long message could freeze PGPony on slower phones; the full text now loads only what is on screen. Security keys with ECDSA keys (secp256k1 and the NIST and brainpool curves) can sign: PGPony passed the card's signature on in the wrong encoding. Card keys on those curves are labeled by their real curve, and scanning the card again corrects an entry stored with the wrong label.
PGPony brings real OpenPGP encryption to Android, with post-quantum cryptography and hardware security key support. Generate PGP keys, then encrypt, decrypt, sign and verify messages and files on your device. No account, no server, no tracking. Fully compatible with GnuPG (GPG), OpenKeychain and other OpenPGP tools.
NEW: Pairing with PGPony Desktop, SSH login with your PGP keys, and post-quantum ML-DSA signatures.
▌POST-QUANTUM ENCRYPTION
- Quantum-resistant ML-KEM-768 and ML-KEM-1024 (Kyber) composite encryption keys
- Post-quantum ML-DSA-65 and ML-DSA-87 (Dilithium) signatures on OpenPGP v6 keys
- IETF standard format, plus the LibrePGP format GnuPG 2.5 uses
- Protects your messages from "harvest now, decrypt later" attacks
▌EMAIL, PASSWORDS AND SSH
- OpenPGP provider for Thunderbird for Android, K-9 Mail and FairEmail
- A modern successor to OpenKeychain: same API, actively maintained
- You approve every connected app and can revoke any of them in Settings
- Read your pass (password-store) entries, including ones on a hardware key
- SSH login with a PGPony key through an ssh-agent in Termux
▌HARDWARE SECURITY KEYS
- Use a YubiKey, Token2 or other OpenPGP smartcard over NFC or USB
- Your private key never leaves the hardware; the PIN confirms every operation
- Generate keys on the card, sign, decrypt and encrypt-and-sign; optional PIN caching
- Change PINs and reset the card; KDF-protected PINs supported
▌PGP KEY MANAGEMENT
- Generate Ed25519, RSA, OpenPGP v6 or post-quantum key pairs
- Import and export armored keys; add subkeys and User IDs; set expiry; revoke
- Encrypted keyring backup and restore, including OpenKeychain backups
▌ENCRYPT, DECRYPT, SIGN
- Encrypt text or files for one or many recipients
- Verify signatures with a clear verified-signer badge
- PGP/MIME email: decrypt messages with attachments, compose .eml
▌OPENPGP V4 + V6 + PQC COMPATIBILITY
- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign
- AEAD-OCB authenticated encryption and Argon2id key protection
- Byte-exact GnuPG interoperability, tested on every release
▌EASY KEY EXCHANGE
- Share your public key as a QR code, file or text; scan to import
- Import a key from a link and check its fingerprint before adding it
- Key server and Web Key Directory (WKD) lookup, including keys.openpgp.org
- Pair with PGPony Desktop (macOS, Windows, Linux) or another phone
- Autocrypt support and a built-in contacts list
▌PRIVACY BY DESIGN
- Encryption runs 100% on your device: no account, no telemetry
- Offline mode turns off every network feature
- Route key server traffic through Tor with Orbot
- Private keys in encrypted storage backed by Android Keystore
- Optional biometric lock, fingerprint-to-sign and auto-clearing clipboard
▌WHO PGPONY IS FOR
- Journalists, researchers and activists handling sensitive information
- Thunderbird, K-9 Mail and FairEmail users who need a crypto provider
- Developers and sysadmins using PGP for code signing, releases or SSH
- GnuPG users who want a mobile companion, or an OpenKeychain replacement
- Anyone who wants encryption that stays private in the quantum era
▌WHY PGPONY
Most "secure messaging" apps ask you to trust their servers. PGPony doesn't need any. Your keys are generated and stored on your device and never leave unless you share them. If you use GnuPG on the desktop, you already know PGPony. New to PGP? It's built to be the easiest place to start.
▌OPEN SOURCE
- Apache-2.0 licensed, with the OpenPGP core published as its own library
- Reproducible builds: anyone can check the release APKs against the source
- Free, with no ads and no in-app purchases
▌PRIVACY COMMITMENT
PGPony does not collect, store or transmit any personal data. No account system, no tracking SDKs. Full privacy policy: pgpony.app/privacy
Made by an indie developer in Alabama. Questions or requests? Tap Send Feedback in the app, or write NorseHorse@norsehor.se.
NEW: Pairing with PGPony Desktop, SSH login with your PGP keys, and post-quantum ML-DSA signatures.
▌POST-QUANTUM ENCRYPTION
- Quantum-resistant ML-KEM-768 and ML-KEM-1024 (Kyber) composite encryption keys
- Post-quantum ML-DSA-65 and ML-DSA-87 (Dilithium) signatures on OpenPGP v6 keys
- IETF standard format, plus the LibrePGP format GnuPG 2.5 uses
- Protects your messages from "harvest now, decrypt later" attacks
▌EMAIL, PASSWORDS AND SSH
- OpenPGP provider for Thunderbird for Android, K-9 Mail and FairEmail
- A modern successor to OpenKeychain: same API, actively maintained
- You approve every connected app and can revoke any of them in Settings
- Read your pass (password-store) entries, including ones on a hardware key
- SSH login with a PGPony key through an ssh-agent in Termux
▌HARDWARE SECURITY KEYS
- Use a YubiKey, Token2 or other OpenPGP smartcard over NFC or USB
- Your private key never leaves the hardware; the PIN confirms every operation
- Generate keys on the card, sign, decrypt and encrypt-and-sign; optional PIN caching
- Change PINs and reset the card; KDF-protected PINs supported
▌PGP KEY MANAGEMENT
- Generate Ed25519, RSA, OpenPGP v6 or post-quantum key pairs
- Import and export armored keys; add subkeys and User IDs; set expiry; revoke
- Encrypted keyring backup and restore, including OpenKeychain backups
▌ENCRYPT, DECRYPT, SIGN
- Encrypt text or files for one or many recipients
- Verify signatures with a clear verified-signer badge
- PGP/MIME email: decrypt messages with attachments, compose .eml
▌OPENPGP V4 + V6 + PQC COMPATIBILITY
- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign
- AEAD-OCB authenticated encryption and Argon2id key protection
- Byte-exact GnuPG interoperability, tested on every release
▌EASY KEY EXCHANGE
- Share your public key as a QR code, file or text; scan to import
- Import a key from a link and check its fingerprint before adding it
- Key server and Web Key Directory (WKD) lookup, including keys.openpgp.org
- Pair with PGPony Desktop (macOS, Windows, Linux) or another phone
- Autocrypt support and a built-in contacts list
▌PRIVACY BY DESIGN
- Encryption runs 100% on your device: no account, no telemetry
- Offline mode turns off every network feature
- Route key server traffic through Tor with Orbot
- Private keys in encrypted storage backed by Android Keystore
- Optional biometric lock, fingerprint-to-sign and auto-clearing clipboard
▌WHO PGPONY IS FOR
- Journalists, researchers and activists handling sensitive information
- Thunderbird, K-9 Mail and FairEmail users who need a crypto provider
- Developers and sysadmins using PGP for code signing, releases or SSH
- GnuPG users who want a mobile companion, or an OpenKeychain replacement
- Anyone who wants encryption that stays private in the quantum era
▌WHY PGPONY
Most "secure messaging" apps ask you to trust their servers. PGPony doesn't need any. Your keys are generated and stored on your device and never leave unless you share them. If you use GnuPG on the desktop, you already know PGPony. New to PGP? It's built to be the easiest place to start.
▌OPEN SOURCE
- Apache-2.0 licensed, with the OpenPGP core published as its own library
- Reproducible builds: anyone can check the release APKs against the source
- Free, with no ads and no in-app purchases
▌PRIVACY COMMITMENT
PGPony does not collect, store or transmit any personal data. No account system, no tracking SDKs. Full privacy policy: pgpony.app/privacy
Made by an indie developer in Alabama. Questions or requests? Tap Send Feedback in the app, or write NorseHorse@norsehor.se.
捐助
版本
雖然在下方可選擇下載 APK 檔案，但要留意這樣的安裝方式將不會收到更新通知，是一種較不安全的下載方法。建議您先安裝 F-Droid 用戶端使用。
下載 F-Droid-
arm64-v8aarmeabi-v7ax86x86_64此版本需要 Android 8.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7ax86x86_64此版本需要 Android 8.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7ax86x86_64此版本需要 Android 8.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
新版本 4.6.4
Nitrokey 3 security keys now work over USB: PGPony read only the first part of longer replies from the key and showed a meaningless error. Recently Deleted shows how many days each key has left. PGPony now appears once in the share menu. Make Primary no longer shifts Revoke and Remove on User ID rows, and the subkey Revoke instead button matches the key delete sheet.