How can we help?

Open PGPony and tap the Keyring tab. Tap the + button to generate a new key. Enter your name and email, pick an algorithm (Ed25519 + Cv25519 is the default and recommended), and optionally set a passphrase. The new key appears in your keyring immediately. The whole flow takes about 15 seconds.

Four ways, all one tap from the Exchange tab: (1) generate a QR code for them to scan, (2) export an .asc file and send it through any app, (3) copy the armored block to your clipboard, or (4) publish to keys.openpgp.org so anyone can find it by email. Your private key never leaves your device — only the public half is ever shared.

Three ways: scan their QR code with the camera button on the Exchange tab, paste their armored public key block into the import field, or use WKD lookup by email (PGPony queries their mail domain and falls back to keys.openpgp.org). Once imported, they show up in the Encrypt tab as a recipient option.

On iOS: in the iOS Keychain, with Secure Enclave protection on every iPhone since the 5s. On Android: in the Android Keystore, hardware-backed where the device supports it. In both cases the OS enforces that keys never leave the secure subsystem; PGPony can request signing or decryption operations but cannot extract the raw key material.

No, and that's by design. The passphrase is the second factor that protects your private key; without it, the key cannot be decrypted to sign or open messages. PGPony has no recovery, no reset, and no backdoor. If you've forgotten it, the key is gone — generate a new one, share the new public key, and ask senders to re-encrypt anything you still need access to.

From the Keyring tab, long-press a key and choose Export → Secret Key. This produces a passphrase-protected .asc file you can save to iCloud Drive, Google Drive, a password manager, an encrypted USB drive, or print on paper. The exported file is useless to anyone who doesn't know the passphrase. We strongly recommend backing up immediately after generation.

Two paths. If iCloud Keychain sync was enabled on iOS, your keys appear automatically on any new device signed into the same Apple ID. Otherwise: export the secret key to an .asc file on the old device (Keyring → long-press → Export → Secret Key), transfer the file securely to the new device, and import it from the Keyring tab. Same flow works across platforms — iOS-exported keys import cleanly into PGPony for Android and vice versa.

Ed25519 + Curve25519 is the default and recommended choice — smaller keys, faster signing, modern cryptography. PGPony generates these as v4 OpenPGP keys today; v6 generation (per RFC 9580) arrives in v6.0 alongside hardware-token support. RSA (2048 or 4096) is also fully supported and remains a good choice if your correspondents are stuck on older versions of GnuPG (pre-2.1) or other legacy tooling. Both are secure; Ed25519 is just newer and lighter.

Your public key is uploaded so anyone who knows your email can find it. You'll receive a verification email from the keyserver — click the link to confirm you control the address (otherwise the email portion of your key stays hidden). Only your public half is uploaded; your private key never leaves your device. To remove your key later, follow the deletion process at keys.openpgp.org/about.

When you copy decrypted text or other sensitive content, PGPony starts a countdown and clears the clipboard automatically when it reaches zero. A floating banner shows the remaining time, and tapping it wipes the clipboard immediately. Duration is configurable in Settings (10s / 30s / 60s / off). This stops sensitive data from sitting around for paste history apps, screen sharing, or shoulder surfers.

No. Zero analytics, zero telemetry, zero crash reporters, zero advertising IDs. PGPony has no server and no account system. Two optional features (bulk key discovery and key publishing) transmit limited data to keys.openpgp.org when you tap a button to start them; both are off by default. See the privacy policy for the full breakdown.

Email NorseHorse@norsehor.se with your device, OS version, app version (Settings → About), and a description of what happened. For bugs, steps to reproduce help enormously. PGPony is built by a solo developer — every email is read by an actual person.