PGP Encryption & Digital Signatures

Complete PGP (Pretty Good Privacy) toolkit for secure communication. Generate RSA/ECC/EdDSA key pairs, encrypt/decrypt messages and files for multiple recipients using AES-GCM, create and verify digital signatures with SHA-256/SHA-512, import/export ASCII-armored and binary keys, handle multi-signatures, and process large files with streaming encryption - all performed securely in your browser.

Overview

This tool is a complete OpenPGP toolkit that runs entirely in your browser. You can generate RSA (up to 4096-bit), ECC (Curve25519, P-256, P-384, P-521), or EdDSA (Ed25519) key pairs; encrypt messages and files for multiple recipients using AES-256-GCM; sign content with SHA-256 or SHA-512; and verify both single and multi-party signatures — all without sending a byte to any server. Because every cryptographic operation happens locally, your private keys and plaintext files never leave your device, making it safe to use for genuinely sensitive communications.

Common Use Cases

  • Secure Developer Secrets — Developers use PGP encryption to share API keys, credentials, and config files with teammates without exposing them in email or Slack.
  • Verify Software Downloads — Open-source users verify detached .asc or .sig signatures against a publisher's public key to confirm a downloaded binary has not been tampered with.
  • Journalist Source Protection — Reporters and their sources exchange ASCII-armored encrypted messages to keep communications private from third parties.
  • Multi-Party Document Signing — Legal or compliance teams use multi-signature creation and verification to collect and audit approval signatures from several parties on a single document.
  • Offline Key Generation — Security-conscious users generate fresh RSA or Ed25519 key pairs in an air-gapped or offline browser session to avoid exposing key material to network-connected services.

How It Works
1

Generate or Import Your Key Pair

Create a new RSA, ECC, or EdDSA key pair directly in the browser using the Web Crypto API, or paste/upload an existing ASCII-armored or binary key. Your private key is held only in browser memory and is never transmitted anywhere.

2

Choose an Operation

Select what you need: encrypt a message or file for one or more recipients, decrypt ciphertext with your private key, sign content to prove authorship, or verify a signature against a known public key. Streaming encryption handles files up to 100 MB without loading them fully into memory.

3

Export or Copy the Result

Download the encrypted output as an ASCII-armored .asc file or a compact binary .gpg/.pgp file, copy a signed message to the clipboard, or save a detached .sig signature file — ready to share through any channel.

Frequently Asked Questions

Does my private key ever leave my browser?
No. All cryptographic operations — key generation, encryption, decryption, and signing — run entirely in your browser using JavaScript and the Web Crypto API. Your private key is kept in browser memory only for the duration of the operation and is never sent to any server.

Which key types and sizes are supported?
You can generate RSA keys at 2048, 3072, or 4096 bits; ECC keys on Curve25519, P-256, P-384, or P-521; and EdDSA keys using Ed25519. For most new keys, Curve25519 or Ed25519 is recommended for modern security and performance.

Can I encrypt a file for multiple recipients at once?
Yes. The encrypt-file operation lets you select multiple recipients' public keys. The file is encrypted with AES-256-GCM and the session key is wrapped separately for each recipient, so any one of them can decrypt it with their own private key.

What is the difference between ASCII armor and binary output?
ASCII-armored output (.asc) encodes the PGP data as plain text, making it safe to paste into emails, chat messages, or web forms. Binary output (.gpg or .pgp) is more compact but must be handled as a file attachment. Both formats are interoperable with GPG and other OpenPGP-compliant tools.

How large a file can I encrypt or sign?
The tool supports streaming encryption and decryption, so it can process files up to 100 MB without loading the entire file into memory at once. This keeps the browser responsive even for large archives or media files.

Are the signatures compatible with GPG on the command line?
Yes. The tool follows the OpenPGP standard (RFC 4880), so signatures and encrypted messages it produces can be verified or decrypted with GPG, and keys exported from this tool can be imported into GPG — and vice versa.

Related Tools

AES File & Text Encryptor Base64 Decode Base64 Encode CSR Generator DER to PEM Converter Hash Generator