Encrypt and decrypt with PGP, make a key, sign and check PGP
OpenPGP for when GnuPG is not installed: a key pair, a message or file encrypted to someone's public key, one sent to you decrypted, signatures made and checked. The files are GnuPG's, and the private key stays in the tab.
Make a key pair
Fingerprint . Read this out to anyone who wants to be sure a public key is yours.
Keep the revocation certificate somewhere safe and apart from the key. If the private key is ever lost or stolen, publishing it tells everyone to stop using the key.
Encrypt to someone’s public key
Decrypt a message sent to you
Sign a message or a file, or check a signature
How it works
PGP makes OpenPGP key pairs, encrypts text or files to one or more public keys, decrypts messages sent to you and checks who signed them, and signs text or files. It uses OpenPGP.js, loaded from this site, and writes standard OpenPGP that GnuPG, Kleopatra, Thunderbird and Proton read. Private keys and passphrases never leave this tab.
What this is built on
The cryptography is OpenPGP.js, maintained by Proton and published under the LGPL 3.0, loaded unmodified from this site and only on this page. The files it writes are standard OpenPGP (RFC 4880 and RFC 9580), which GnuPG, Kleopatra, GPG Suite, Thunderbird and Proton read; the tests exchange keys, messages and signatures with GnuPG in both directions.
New keys are Curve25519 (EdDSA and ECDH) version 4 keys, which every OpenPGP program in use reads. A private key and its passphrase are only ever in this tab; nothing is kept once the tab closes and nothing is sent. For files you only want to lock with a password, CAPSULE is simpler, and KEYRING does the same job with age keys.
Doing this often? The OBSCURA Sovereign Suite seals files for the person with the passphrase or the key, signs your own releases, and keeps a certificate inventory. On its own, US$2 a month; with everything else, US$5 a month or US$48 a year. 7 days free.