PGP toolkit

Generate a PGP keypair, encrypt or decrypt a message, and sign or verify one — all in your browser with OpenPGP.js. Your keys and your plaintext never leave the device: 0 uploads, works offline after the first visit.

1. Pick an operation: Generate keys, Encrypt, Decrypt, Sign, or Verify.
2. Paste the key(s) and message the operation needs — for example a recipient's public key and your text to encrypt.
3. Run it, then copy or download the result (.asc for keys, .txt for messages).

How do I generate a PGP key pair for free?

Choose Generate keys, enter a name and email, optionally set a passphrase, and run it. You get an armored public key (share it) and private key (keep it secret) — created on your device with nothing uploaded. Keys are Curve25519 (modern ECC): fast to make and compact.

Is my private key or message sent anywhere?

No. Every operation runs entirely in your browser via OpenPGP.js — keys and plaintext are never transmitted or stored. You can verify this by turning off Wi-Fi and using the tool offline, which matters for anything you're actually keeping private.

What's the difference between signing and encrypting?

Encrypting scrambles a message so only the holder of the matching private key can read it. Signing leaves the message readable but attaches proof it came from you and wasn't altered — anyone with your public key can Verify it. You can do either independently here.

I set a passphrase on my key — why do I need it again?

A passphrase encrypts the private key itself. To Decrypt or Sign with a passphrase-protected key you must enter that same passphrase so the key can be unlocked in memory; it's never saved. Lose the passphrase and the key can't be used — there's no recovery.

Is this compatible with GPG / other PGP tools?

Yes. Keys and messages are standard OpenPGP (RFC 4880 armored blocks), so they interoperate with GnuPG (gpg), Thunderbird/Enigmail, ProtonMail and other OpenPGP software.

Keys are Curve25519 ECC (not RSA). Messages are handled as text; to encrypt whole files use the file-encryptor tool.

The file-encryptor tool encrypts files with a password; the hash-generator tool creates checksums for integrity checks.

Bookmark this page (Ctrl+D, or ⌘D on Mac) or install the app — it works offline the next time you need it.