PGPony: PGP Encryption Keys

PGPony brings real OpenPGP encryption to Android — now with post-quantum cryptography and hardware security key support. Generate PGP keys, encrypt, sign, and decrypt 100% offline. No account, no server, no tracking. Fully compatible with GnuPG, OpenKeychain, and other OpenPGP tools.

NEW: Post-quantum ML-KEM (Kyber) encryption keys, and use PGPony as the OpenPGP engine inside Thunderbird, K-9 Mail, and Password Store.

▌POST-QUANTUM ENCRYPTION (NEW)

- Generate quantum-resistant ML-KEM-768 + X25519 composite keys (Kyber)

- Supports both the IETF draft standard and the GnuPG 2.5 LibrePGP format

- Protects your messages from "harvest now, decrypt later" attacks

- Tested byte-for-byte against GnuPG 2.5 post-quantum keys

▌WORKS INSIDE YOUR EMAIL APP (NEW)

- OpenPGP provider for Thunderbird for Android, K-9 Mail, and Password Store

- A modern successor to OpenKeychain — same API, actively maintained

- You approve every connected app; per-app authorization with revocation

▌HARDWARE SECURITY KEYS

- Tap a YubiKey, Token2, or other NFC OpenPGP smartcard to sign and decrypt

- Your private key never leaves the hardware; PIN confirms every operation

- Encrypt-and-sign, decrypt, and sign with on-card keys; optional PIN caching

- Change your card PIN and edit key expiration in the app

▌PGP KEY MANAGEMENT

- Generate Ed25519 + Curve25519, RSA, OpenPGP v6, or post-quantum key pairs

- Import and export standard ASCII-armored OpenPGP keys

- Set a default signing key; manage multiple identities with passphrases

- Encrypted keyring backup and restore — including OpenKeychain backups

- Edit key expiration: extend, change, or set keys to never expire

▌ENCRYPT, DECRYPT, SIGN

- Encrypt text or files for one or many recipients

- PGP/MIME email support: decrypt messages with attachments, compose .eml

- Sign with Ed25519; verify signatures with a clear verified-signer badge

- Auto-clearing clipboard and one-tap reset

▌OPENPGP V4 + V6 + PQC COMPATIBILITY

- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign

- AEAD-OCB authenticated encryption and Argon2id key protection

- Byte-exact GnuPG interoperability, tested on every release

▌EASY KEY EXCHANGE

- Share your public key as a QR code, file, or text; scan to import

- Keyserver and Web Key Directory (WKD) lookup

- Autocrypt support and a built-in contacts list

▌PRIVACY BY DESIGN

- 100% offline encryption: no server, no account, no telemetry

- Route keyserver traffic through Tor with Orbot integration

- Private keys in encrypted storage backed by Android Keystore

- Optional biometric lock, plus a separate biometric-to-sign toggle

- Open standards: RFC 4880 + RFC 9580 (OpenPGP)

▌WHO PGPONY IS FOR

- Journalists, researchers, and activists handling sensitive information

- Thunderbird, K-9 Mail, and Password Store users who need a crypto provider

- Developers and sysadmins using PGP for code signing or releases

- GnuPG users who want a mobile companion — or an OpenKeychain replacement

- Anyone who wants encryption that will still be private in the quantum era

▌WHY PGPONY

Most "secure messaging" apps ask you to trust their servers. PGPony doesn't have any. Your keys are generated and stored on your device and never leave unless you share them. No account, no analytics SDK watching you. If you use GnuPG on the desktop, you already know PGPony. New to PGP? It's built to be the easiest place to start.

▌COMPATIBILITY

- Android 8.0 (API 26) and newer; NFC key support on NFC-capable devices

- Built on Bouncy Castle 1.85, fully interoperable with GnuPG

- Optimized for phones and tablets, dark theme throughout

▌PRIVACY COMMITMENT

PGPony does not collect, store, or transmit any personal data. No key server, no account system, no tracking SDKs. Full privacy policy: pgpony.norsehor.se/privacy.

Made by an indie developer in Alabama. Questions or requests? Tap Send Feedback in the app, or write [email protected].