PGPony: PGP & GPG Encryption

PGPony brings real OpenPGP encryption to Android, with post-quantum cryptography and hardware security key support. Generate PGP keys, then encrypt, decrypt, sign and verify messages and files on your device. No account, no server, no tracking. Fully compatible with GnuPG (GPG), OpenKeychain and other OpenPGP tools.

NEW: Pairing with PGPony Desktop, SSH login with your PGP keys, and post-quantum ML-DSA signatures.

▌POST-QUANTUM ENCRYPTION
- Quantum-resistant ML-KEM-768 and ML-KEM-1024 (Kyber) composite encryption keys
- Post-quantum ML-DSA-65 and ML-DSA-87 (Dilithium) signatures on OpenPGP v6 keys
- IETF standard format, plus the LibrePGP format GnuPG 2.5 uses
- Protects your messages from "harvest now, decrypt later" attacks

▌EMAIL, PASSWORDS AND SSH
- OpenPGP provider for Thunderbird for Android, K-9 Mail and FairEmail
- A modern successor to OpenKeychain: same API, actively maintained
- You approve every connected app and can revoke any of them in Settings
- Read your pass (password-store) entries, including ones on a hardware key
- SSH login with a PGPony key through an ssh-agent in Termux

▌HARDWARE SECURITY KEYS
- Use a YubiKey, Token2 or other OpenPGP smartcard over NFC or USB
- Your private key never leaves the hardware; the PIN confirms every operation
- Generate keys on the card, sign, decrypt and encrypt-and-sign; optional PIN caching
- Change PINs and reset the card; KDF-protected PINs supported

▌PGP KEY MANAGEMENT
- Generate Ed25519, RSA, OpenPGP v6 or post-quantum key pairs
- Import and export armored keys; add subkeys and User IDs; set expiry; revoke
- Encrypted keyring backup and restore, including OpenKeychain backups

▌ENCRYPT, DECRYPT, SIGN
- Encrypt text or files for one or many recipients
- Verify signatures with a clear verified-signer badge
- PGP/MIME email: decrypt messages with attachments, compose .eml

▌OPENPGP V4 + V6 + PQC COMPATIBILITY
- Full OpenPGP v4 (RFC 4880) and v6 (RFC 9580): generate, encrypt, decrypt, sign
- AEAD-OCB authenticated encryption and Argon2id key protection
- Byte-exact GnuPG interoperability, tested on every release

▌EASY KEY EXCHANGE
- Share your public key as a QR code, file or text; scan to import
- Import a key from a link and check its fingerprint before adding it
- Key server and Web Key Directory (WKD) lookup, including keys.openpgp.org
- Pair with PGPony Desktop (macOS, Windows, Linux) or another phone
- Autocrypt support and a built-in contacts list

▌PRIVACY BY DESIGN
- Encryption runs 100% on your device: no account, no telemetry
- Offline mode turns off every network feature
- Route key server traffic through Tor with Orbot
- Private keys in encrypted storage backed by Android Keystore
- Optional biometric lock, fingerprint-to-sign and auto-clearing clipboard

▌WHO PGPONY IS FOR
- Journalists, researchers and activists handling sensitive information
- Thunderbird, K-9 Mail and FairEmail users who need a crypto provider
- Developers and sysadmins using PGP for code signing, releases or SSH
- GnuPG users who want a mobile companion, or an OpenKeychain replacement
- Anyone who wants encryption that stays private in the quantum era

▌WHY PGPONY
Most "secure messaging" apps ask you to trust their servers. PGPony doesn't need any. Your keys are generated and stored on your device and never leave unless you share them. If you use GnuPG on the desktop, you already know PGPony. New to PGP? It's built to be the easiest place to start.

▌OPEN SOURCE
- Apache-2.0 licensed, with the OpenPGP core published as its own library
- Reproducible builds: anyone can check the release APKs against the source
- Free, with no ads and no in-app purchases

▌PRIVACY COMMITMENT
PGPony does not collect, store or transmit any personal data. No account system, no tracking SDKs. Full privacy policy: pgpony.app/privacy

Made by an indie developer in Alabama. Questions or requests? Tap Send Feedback in the app, or write NorseHorse@norsehor.se.

Recent changes:
Move existing keys onto a security key, like gpg's keytocard. Certify other people's keys, a Don't use trust level, per-subkey expiry, Refresh self-signatures and Use for signing. App PIN with a duress PIN. Mail apps ask which key to use when an address has none, and a held passphrase survives on Xiaomi. USB keys in mail apps, GitHub key lookup, per-file encrypt and multi-file decrypt, safer saves, and many fixes from tester reports.