PGPony
Encrypt, decrypt and sign with OpenPGP. Post-quantum keys and security keys.
com.pgpony.android
About PGPony
PGPony brings real OpenPGP encryption to Android, with post-quantum cryptography and hardware security key support. Generate PGP keys, then encrypt, decrypt, sign and verify messages and files on your device. No account, no server, no tracking. Fully compatible with GnuPG (GPG), OpenKeychain and other OpenPGP tools.
NEW: Pairing with PGPony Desktop, SSH login with your PGP keys, and post-quantum ML-DSA signatures.
▌POST-QUANTUM ENCRYPTION
- Quantum-resistant ML-KEM-768 and ML-KEM-1024 (Kyber) composite encryption keys
- Post-quantum ML-DSA-65 and ML-DSA-87 (Dilithium) signatures on OpenPGP v6 keys
- IETF standard format, plus the LibrePGP format GnuPG 2.5 uses
- Protects your messages from "harvest now, decrypt later" attacks
▌EMAIL, PASSWORDS AND SSH
- OpenPGP provider for Thunderbird for Android, K-9 Mail and FairEmail
- A modern successor to OpenKeychain: same API, actively maintained
- You approve every connected app and can revoke any of them in Settings
- Read your pass (password-store) entries, including ones on a hardware key
- SSH login with a PGPony key through an ssh-agent in Termux
▌HARDWARE SECURITY KEYS
- Use a YubiKey, Token2 or other OpenPGP smartcard over NFC or USB
- Your private key never leaves the hardware; the PIN confirms every operation
- Generate keys on the card, sign, decrypt and encrypt-and-sign; optional PIN caching
- Change PINs and reset the card; KDF-protected PINs supported
▌PGP KEY MANAGEMENT
- Generate Ed25519, RSA, OpenPGP v6 or post-quantum key pairs
- Import and export armored keys; add subkeys and User IDs; set expiry; revoke
- Encrypted keyring backup and restore, including OpenKeychain backups
▌ENCRYPT, DECRYPT, SIGN
- Encrypt text or files for one or many recipients
- Verify signatures with a clear verified-signer badge
- PGP/MIME email: decrypt messages with attachments, compose .eml
▌OPENPGP V4 + V6 + PQC COMPATIBILITY
- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign
- AEAD-OCB authen