PGP Bestand Ontsleutelen

Overview

Open a PGP or GPG encrypted file with your own private key. Drop in the file, enter your passphrase, and get the original back with its file name. The download only appears after the integrity check passes, so a changed or cut-short file gives you nothing instead of a broken file. Any signature is reported too, and openpgp.js runs on your device, so nothing is uploaded.

Documents sent to youDecrypt a contract or report encrypted to your public key, and see if it was signed.
Encrypted backupsRecover a file from a PGP-encrypted backup without installing GnuPG.
Check it yourselfOpen your browser's network tab while you decrypt and see that no requests are made.
Locked-down computersOpen a .gpg file where you can't install GnuPG. Import your protected key, decrypt, then remove the key from this browser.
Team secretsDecrypt a shared .env or config file without setting up GnuPG first.

Set

Beveiligingstools 26

Neighbours

01 AES Bestand & Tekst Encryptor 02 Base64 Decoderen 03 Base64 Coderen 04 CSR Generator 05 DER naar PEM Converter 06 Hash Generator

Specification

Command: security.pgp_decrypt_file
Set: Security
Input: text
Output: *
Max. bestand: 50MB
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

Your file is opened, worked on and saved inside this tab. This tool has no upload step, so your file has nowhere else to go.

Keys

Zoeken: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Drop in the encrypted file

Use a .pgp, .gpg or armored .asc file, or paste the ciphertext into the box below.

Enter your passphrase

Pick your private key from this browser's keyring, then type its passphrase, which is used once and never stored. A key made elsewhere gets there through PGP Import Keys.

Download if it checks out

If the integrity check passes you get the original file with its name; if it fails you get nothing, not even a partial file.

Frequently asked

Why won't this file decrypt?

There are three possible reasons, and each is reported on its own: the file isn't addressed to any key you hold, the passphrase is wrong, or it failed the integrity check because it was changed or cut short. Only the last one is a problem with the file itself.

Will I get back exactly the original file?

Yes. The bytes are identical to what was encrypted, and you see the file name stored in the message. Nothing is re-encoded.

What happens if the file has been tampered with?

You get nothing. The integrity check covers the whole file, so the output is held back until the last byte is checked. A file that fails is thrown away and no download appears.

How large a file can I decrypt?

The decrypted file is kept in memory until it passes the check, so the limit is your device's memory. Tens of megabytes is fine on a desktop; a phone gives up sooner. For very large archives, use desktop GnuPG.

Can I decrypt a file that was encrypted for someone else?

No. Only a key the file was addressed to can open it. If it went to several recipients, any of them can open it with their own key, and the tool tells you when none of your keys match.

Keys

Zoeken: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/