← back to apps

AgePony

com.agepony.app

android kind 32267

Post-quantum file & message encryption with age. On-device, private, no ads.

latest release
5.0.1 main
released 2026-09-25 08:04 UTC
download apk
com.agepony.app_17.apk · 4.5 MB
android-arm64-v8aandroid-armeabi-v7aandroid-x86android-x86_64 vcode 17
✓ signed cert 2e5febf6…
screenshotscreenshotscreenshotscreenshot

about

description
AgePony is a fast, private encryption app for your phone, built on the modern age encryption format. Lock your files and messages so only the right person can open them, sign them so recipients know the file really came from you, and keep your keys and data on your device. No accounts, no tracking, no analytics. POST-QUANTUM ENCRYPTION Protect your data against "harvest now, decrypt later" attacks. AgePony generates quantum-safe hybrid keys (ML-KEM-768 combined with X25519) that stay secure even against a future quantum computer, while staying fully interoperable with the age command-line tool. Anything encrypted to a quantum-safe recipient is clearly badged, so you always know the protection you are using. Also included: - Encrypt and sign in a single step, so recipients can both open your file and confirm it is really from you. - A built-in migration tool to upgrade older files to quantum-safe encryption. Batch re-encrypt your existing files to a new quantum-safe key, with your originals kept until the new copy is verified. WHY AGEPONY - Standard age encryption. AgePony reads and writes the same format as the age CLI, so your files work with other age tools on desktop and server. - Public key or passphrase. Encrypt to someone's public key, or lock a file with a passphrase you share separately. - SSH signing, done properly. Sign and verify files from a dedicated Sign tab using SSH Ed25519 or RSA keys, a hardware key, or a security key over NFC, and keep a list of trusted signers. Signatures use the SSHSIG standard, so ssh-keygen verifies them. - On device by default. Encryption, decryption, signing, and key generation all happen locally on your phone, and your private keys never leave your device. - One optional online step. When you import a recipient from GitHub, AgePony fetches that person's public SSH keys from github.com. That is the only network request the app makes, it happens only when you tap Fetch, and nothing about you is sent. - No tracking, no ads, no account required. AgePony does not collect analytics or personal data. - Open source. The full source is available for review. FEATURES - Generate and store age key pairs in an app vault, unlocked with your device biometrics. - Quantum-safe hybrid keys (ML-KEM-768 + X25519) alongside classic X25519 keys. - Encrypt and decrypt files and text messages. - Passphrase encryption for quick, key-free sharing. - Sign and verify files (SSHSIG) with SSH Ed25519 or RSA keys, hardware keys, or a security key over NFC, with a trusted-signers list. - Unlock with your biometric, a password, or a PIN, so the app works even with no screen lock set up. - Optional duress password that wipes the vault when entered. - Scan recipient keys with your camera by QR code. - Import a recipient from a GitHub username, fetching their public SSH keys from github.com. - Batch migrate existing files to quantum-safe encryption. Whether you are a journalist, an activist, a developer, or simply someone who wants real control over their private files, AgePony gives you strong, standard encryption without the complexity. AgePony is an independent app built on the open age encryption format and is not affiliated with the age project.
publisher
78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d
first seen
2026-09-26T01:44:25.967016+00:00
last event
2026-10-07 16:16 UTC
install
zapstore.dev or any Zapstore-compatible client

source & build

repository
https://github.com/norsehorse-dev/ageponyandroid
arch flags
android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64
manifest
missing

releases (kind 30063)

1 release indexed; latest 5.0.1.

versionchannelreleasedevent
5.0.1 main 2026-09-25 08:04 UTC 94eb0d16…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

5.0.1 — com.agepony.app_17.apk

sha256
9813e5f4451fd6268388a735de9304d496e3e949d3ea1c01942343c4f52c3246
size
4.5 MB
archs
android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
version code
17
apk cert sha256
2e5febf62fd7915a7d7710b4539c7a0237a84c22fbe5a8317bcbbc68f1e4719f
download
com.agepony.app_17.apk

Showing the newest 1 asset descriptor; the full set is in /api/apps/78ce6faa…