PGP Encrypt Message

Overview

Encrypt a message to one or more OpenPGP public keys and get a standard ASCII-armored block to paste into an email, ticket or chat. Each recipient opens the same block with their own private key. Turn on signing if they need to know it came from you. It runs on openpgp.js in your browser, so your text, keys and passphrase stay on your computer. For files, use PGP Encrypt File.

Sending something sensitive by emailEncrypt the message to your correspondent's public key so the mail servers in between cannot read it.
Handing over a credentialWrap an API key or password in PGP before it goes into Slack or a ticket, where it would otherwise sit in plain text.
Writing to a whole teamAdd each colleague's public key and send one block that everyone can open with their own key.
Encrypting and signing in one stepFor a security disclosure or a payment instruction, encrypt to the recipient and sign with your own key at once.
Working without a local GPG setupSend an encrypted message from a machine without GnuPG, using a public key you import here.

Guides

01 How to generate a PGP key pair

Set

Security Tools 26

Neighbours

01 AES File & Text Encryptor 02 Base64 Decode 03 Base64 Encode 04 CSR Generator 05 DER to PEM Converter 06 Hash Generator

Specification

Command: security.pgp_encrypt_message
Set: Security
Input: text
Output: ASC
Max file: no limit
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

Your file is opened, worked on and saved inside this tab. This tool has no upload step, so your file has nowhere else to go.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Pick the recipients

Choose keys from this browser's keyring, as many as you need. Someone else's public key gets there through PGP Import Keys.

Type the message

Write or paste your text, and turn on signing if the recipient should know it came from you.

Copy the armored block

You get standard ASCII-armored OpenPGP text that anyone with GnuPG can decrypt.

Frequently asked

How does encrypting to a public key work?

The message is encrypted once with a random session key, and that key is wrapped with each recipient's public key. Only the matching private key can unwrap it, and you never need anything secret from them.

Do I need my own key to encrypt?

No. Encrypting needs only the recipient's public key. You need your own private key only to sign, which shows the message came from you.

Can I encrypt to several people at once?

Yes. Add each recipient's public key and you get one block that each of them opens with their own private key. Nobody has to share a password.

Does encrypting prove who sent the message?

No. Encryption hides the contents, but anyone can encrypt to a public key, so it says nothing about who wrote it. Sign the message as well if that matters.

What if I don't have the recipient's public key?

Then you cannot encrypt to them yet, so ask them for it. Check the fingerprint they give you against the one shown when you import it, over a channel you already trust.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/