PGPony
com.pgpony.android
android Apache-2.0 kind 32267
OpenPGP encryption with hardware security keys and password-store support
latest release
4.7.1
main
released 2026-10-24 03:25 UTC
download apk
PGPony-4.7.1-foss.apk · 11.0 MB
✓ signed
cert 446bf9e6…
about
- description
- PGPony is an OpenPGP app for Android. Encrypt, decrypt, sign, and verify messages and files, manage your keyring, and use a hardware security key over NFC, all on device. Features: - Encrypt, decrypt, sign, and verify text and files - Post-quantum encryption: ML-KEM-768 + X25519 (Kyber) composite keys, in both the IETF draft (v6) and LibrePGP / GnuPG 2.5 (v5) formats - OpenPGP provider service: use PGPony as the crypto engine for Thunderbird for Android, K-9 Mail, and Password Store (OpenKeychain-compatible API) - Generate modern keys, including RFC 9580 (OpenPGP v6) Ed25519 and X25519, with Argon2id passphrase protection - Hardware security keys over NFC, including YubiKey 5 NFC and Token2, with on-card key generation, decrypt, sign, PIN management, and factory reset - Read your password-store (pass) entries, including those protected by a hardware key - Encrypted keyring backup and restore, including OpenKeychain backup import - PGP/MIME email: decrypt messages with attachments, compose encrypted .eml - Key discovery through WKD and the keys.openpgp.org verifying keyserver; optional Tor routing via Orbot - Optional contact integration for choosing recipients - QR import and scanning for keys - Default signing key, biometric lock, and secure-screen protection Post-quantum limitations: Post-quantum OpenPGP is still being standardized, so cross-tool support is limited: - LibrePGP-format (v5) keys interoperate with GnuPG 2.5+ today: messages encrypt and decrypt in both directions, and public keys import cleanly. GnuPG cannot yet import post-quantum PRIVATE keys from any app — it stores them in a proprietary internal format. - IETF-format (v6) keys implement draft-ietf-openpgp-pqc and are verified against the draft's official test vectors, but current Sequoia (sq) preview builds implement a different draft revision and cannot read them yet, and GnuPG does not support this format at all. - Classical keys (RSA, Ed25519, v4 and v6) are unaffected. PGPony does not use accounts, ads, analytics, or tracking. The F-Droid build contains no Google services and runs fully on de-Googled devices. The cryptographic core is published separately as open source (PGPonyCore-Kotlin), and the full app source is available under the Apache-2.0 license.
- publisher
- 78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d
- first seen
- 2026-09-17T22:33:15.735248+00:00
- last event
- 2026-10-24 03:25 UTC
- website
- https://pgpony.app
- install
- zapstore.dev or any Zapstore-compatible client
- topics
- #password & 2fa #text encryption
source & build
- repository
- https://github.com/norsehorse-dev/pgponyandroid
- arch flags
- android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64
- manifest
- missing
releases (kind 30063)
10 releases indexed; latest 4.7.1.
| version | channel | released | event |
|---|---|---|---|
| 4.7.1 | main | 2026-10-24 03:25 UTC | a0bb7692… |
| 4.7.0 | main | 2026-10-20 17:41 UTC | 62a307cc… |
| 4.6.4 | main | 2026-10-06 21:39 UTC | 13ab5738… |
| 4.6.3 | main | 2026-10-05 03:38 UTC | 00bbf0e3… |
| 4.6.2 | main | 2026-09-28 20:31 UTC | 300e5da0… |
| 4.6.1 | main | 2026-09-26 03:38 UTC | 664227b5… |
| 4.6.0 | main | 2026-09-24 18:48 UTC | f0405704… |
| 4.5.3 | main | 2026-09-22 00:41 UTC | d7ebf420… |
| 4.5.2 | main | 2026-09-18 03:32 UTC | b6d4f71e… |
| 4.5.0 | main | 2026-09-16 02:48 UTC | 2be784be… |
assets & verification
Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.
4.7.1 — PGPony-4.7.1-foss.apk
- sha256
- 99d36b8c6aa7ac6bbfbea0a3f03bd3ba242fa28b8e3ddaa160aba6b721d1dc45
- size
- 11.0 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 471
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.7.1-foss.apk
4.7.0 — PGPony-4.7.0-foss.apk
- sha256
- a78977fe4b6c957cc7599389766a5df664f92a2e09133a171a1e3c9ad32ef059
- size
- 11.0 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 470
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.7.0-foss.apk
4.6.4 — PGPony-4.6.4-foss.apk
- sha256
- 3ae551b26577492d4b60fa8ded8d021d01c16957d19f2854f0790e500cd09547
- size
- 10.3 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 464
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.6.4-foss.apk
4.6.3 — PGPony-4.6.3-foss.apk
- sha256
- 3af5ca347c5e53331ab84793bba98140673f00a7f1f772cb365c8001fbeaf208
- size
- 10.3 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 463
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.6.3-foss.apk
4.6.2 — PGPony-4.6.2-foss.apk
- sha256
- 856ab53741eac9154474a5e4ea8c728b82d4f4652d468f4ce5a083fc7b3cc743
- size
- 10.1 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 462
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.6.2-foss.apk
4.6.1 — PGPony-4.6.1-foss.apk
- sha256
- 681d13767d4ece6a79a5f2da095c2a3a1f5495ea0d8feb91737c6d89693ecbda
- size
- 9.2 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 461
- apk cert sha256
- 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
- download
- PGPony-4.6.1-foss.apk
Showing the newest 6 asset descriptors; the full set is in /api/apps/78ce6faa…