PGPony App Android Free Download
- Released
- Jun 26, 2026
- License
- Apache-2.0
- Package
- com.pgpony.android
- SHA-256
3af5ca347c5e53331ab84793bba98140673f00a7f1f772cb365c8001fbeaf208
Screenshots
What's new v4.6.3
Pair with PGPony Desktop or another phone on the same network and move public keys, key pairs or a full backup after comparing a code on both screens. A mail app now keeps your passphrase for the time you chose in Settings, an SSH agent keeps every key you approved instead of asking again on each connection, and package mode can sign with ML-DSA keys. Fixed: messages from rPGP-based apps to v6 keys, adding a User ID or revoking a subkey on a protected ML-DSA key, images shared into PGPony openin
About PGPony
PGPony is an OpenPGP app for Android. Encrypt, decrypt, sign, and verify messages and files, manage your keyring, and use a hardware security key over NFC, all on device.
Features:
- Encrypt, decrypt, sign, and verify text and files
- Post-quantum encryption: ML-KEM-768 + X25519 (Kyber) composite keys, in both the IETF draft (v6) and LibrePGP / GnuPG 2.5 (v5) formats
- OpenPGP provider service: use PGPony as the crypto engine for Thunderbird for Android, K-9 Mail, and Password Store (OpenKeychain-compatible API)
- Generate modern keys, including RFC 9580 (OpenPGP v6) Ed25519 and X25519, with Argon2id passphrase protection
- Hardware security keys over NFC, including YubiKey 5 NFC and Token2, with on-card key generation, decrypt, sign, PIN management, and factory reset
- Read your password-store (pass) entries, including those protected by a hardware key
- Encrypted keyring backup and restore, including OpenKeychain backup import
- PGP/MIME email: decrypt messages with attachments, compose encrypted .eml
- Key discovery through WKD and the keys.openpgp.org verifying keyserver; optional Tor routing via Orbot
- Optional contact integration for choosing recipients
- QR import and scanning for keys
- Default signing key, biometric lock, and secure-screen protection
Post-quantum limitations:
Post-quantum OpenPGP is still being standardized, so cross-tool support is limited:
- LibrePGP-format (v5) keys interoperate with GnuPG 2.5+ today: messages encrypt and decrypt in both directions, and public keys import cleanly. GnuPG cannot yet import post-quantum PRIVATE keys from any app — it stores them in a proprietary internal format.
- IETF-format (v6) keys implement draft-ietf-openpgp-pqc and are verified against the draft's official test vectors, but current Sequoia (sq) preview builds implement a different draft revision and cannot read them yet, and GnuPG does not support this format at all.
- Classical keys (RSA, Ed25519, v4 and v6) are unaffected.
PGPony does not use accounts, ads, analytics, or tracking. The F-Droid build contains no Google services and runs fully on de-Googled devices.
The cryptographic core is published separately as open source (PGPonyCore-Kotlin), and the full app source is available under the Apache-2.0 license.
APK file hosted on AABforAndroid (Oct 9, 2026, SHA-256 verified). Free and open-source software (Apache-2.0) · Source code.
