PGP encryption tool

PGP (Pretty Good Privacy), standardised as OpenPGP, uses public-key cryptography for end-to-end encrypted messages and signatures. You share your public key freely; anyone can use it to encrypt a message that only your private key can decrypt. This tool lets you generate keys and encrypt or decrypt messages directly in your browser.

How to use it

1. Generate a key pair with your name, email and a strong passphrase, or paste existing keys.
2. To send a secret message, paste the recipient's public key and your message, then encrypt.
3. To read a message, paste your private key, its passphrase and the encrypted text, then decrypt.

What the keys look like

Keys and messages are ASCII-armored, starting with lines like -----BEGIN PGP PUBLIC KEY BLOCK----- and -----BEGIN PGP MESSAGE-----. Share only the public key block.

How it works

PGP is hybrid encryption: the message is encrypted with a random symmetric session key (for example AES-256), and that session key is encrypted with the recipient's public key. Signing works the other way: a hash of the message is signed with the sender's private key so anyone with the public key can verify it.

Security practices

• Protect the private key with a long passphrase and back it up offline.
• Verify a public key's fingerprint with its owner through another channel before trusting it.
• Prefer modern ECC keys (Curve25519) or RSA of at least 3072 bits.
• Publish a revocation certificate if a key is lost or compromised.
• For long-term or high-value keys, generate them in desktop software like GnuPG on a trusted machine.