Post-quantum signatures. Create ML-DSA-65 + Ed25519 keys (RFC 9980), sign and verify with them, and add post-quantum subkeys to a key you already have, including the v4 shape GnuPG 2.5 reads. Several recipients. A message to two or more recipients that includes post-quantum keys now decrypts for every one of them. Before, it could fail to decrypt. NIST curves. P-256, P-384 and P-521 keys now encrypt, decrypt, sign and verify, not just import. Key Detail, reorganized. Actions now sit in a menu in the corner. Add, revoke or remove subkeys and User IDs, then upload the updated key to key servers from the same screen, with the primary identity kept the way you set it. Encrypting. Pick which subkey to encrypt to when a key has more than one, see which of your keys decrypted a message, and get a warning when a message mixes post-quantum and classic recipients. Key servers. Add your own key servers, and turn Web Key Directory lookups on or off. Files made with gpg -c --force-aead now decrypt. Security hardening. Stricter checks on keys and messages that come from outside, and tighter limits on what PGPony will read. Keys whose signatures this device cannot verify (some older DSA, brainpool and Ed448 keys) are now only updated when you re-import them yourself. If you write to someone with such a key, compare its fingerprint with them once. Thanks to the testers who sent sample files and step-by-step reports for this release.

Russian, cleaned up. The Russian translation had a full review from a native speaker. About 380 strings were reworded for accuracy and the rest checked against the current wording, so nothing reads as machine output anymore. If you use PGPony in Russian, the whole app should feel more natural.

Large files Encrypting, signing, and saving very large files (several GB) no longer crashes or freezes the device. Large files now stream through in chunks instead of loading into memory all at once. Post-quantum keys Fixed backup and restore of post-quantum (ML-KEM) keys. The encryption half is no longer dropped when you restore. Fixed how post-quantum (v6) keys report their format, and fixed signing and signature verification with them. Offline Mode New Offline Mode under Settings, Security. When it is on, PGPony makes no network requests at all. Fully translated. Other fixes Fixed encrypting to contacts whose keys use Twofish or Camellia. Fixed the Recently Deleted screen so single-key delete, restore, and empty all behave correctly. The signer is now shown when you decrypt a signed file. Various stability and translation fixes.

PGPony 8.2.0 brings iOS in line with the Android 4.2.0 and 4.3.0 releases. This is the largest update yet. POST-QUANTUM New ML-KEM-1024 with X448 keys, beside the existing 768 suite, in both the LibrePGP and v6 composite forms. Tested against GnuPG 2.5.x in both directions. Large post-quantum files now open on the streaming path, so size is no longer a wall. KEYS AND IDENTITIES Change a key's passphrase: add one, change it, or remove it, on v4, v6, and post-quantum keys. Multiple identities per key: add and revoke user IDs and choose your primary. Add subkeys, edit a key's expiration, and see each subkey's algorithm and capabilities in Key Detail. Editable identity proofs: add identity notations like proof@ariadne.id=... to your key, then verify a contact's proofs against HTTPS pages, GitHub gists, Mastodon profiles, and DNS records. Import now recognizes brainpool and NIST-curve keys from GnuPG and other tools. The import screen shows the full fingerprint in readable four-character groups. DELETING, SAFELY A key recycle bin: deleting a key moves it to Recently Deleted, restorable for 30 days, instead of destroying it outright. Deleting a key pair offers a backup first and asks for Face ID. Clear All Data is a deliberate, multi-step reset. Per-key fallback decryption keys and signing defaults, so the right key signs for each recipient and older recipients still get a signature they can verify. SENDING AND RECEIVING Streaming for large files and bundles: encrypt and decrypt multi-file bundles with flat memory use, and progress on big exports. Wrap encrypted output in a .zip for transports that mangle .asc and .gpg attachments. Decrypting a .zip just works. Animated multi-part QR: a large key now cycles across several QR frames automatically. Open a signed-but-not-encrypted file and verify it in place, instead of hitting an error. Fixed a WKD and keyserver import that failed to parse some keys, including certain Thunderbird keys. EVERYTHING ELSE Passphrase cache with a duration you choose, from one minute to until you clear it. Back up and restore your whole keyring, and import OpenKeychain backups. Fully localized in English, German, Spanish, French, Japanese, Brazilian Portuguese, Russian, and Simplified Chinese. Many of these came straight from user reports on GitHub and the board.

iPad support. PGPony now runs on iPad, with a layout built for the larger screen. Large files, end to end. You can now encrypt, sign, and decrypt files of any size, not just under 64 MB. It works with an RSA hardware key over NFC or USB-C, with a live progress bar and a cancel button the whole way through. Signing fixes. Signing with a passphrase-protected RSA key works now instead of failing, whether the key was imported from GnuPG or generated in PGPony. A wrong passphrase tells you so, rather than a generic error. Hardware keys. Clearer guidance throughout for NFC and USB-C keys, including when a key can only be plugged in. Plus a round of smaller fixes to the keyboard, buttons, and cancel behavior from tester reports. Thanks to everyone who wrote in with detail.

This update fixes an issue where a hardware security key was not offered for signing on the Encrypt tab, even though it could still decrypt normally. If your YubiKey or other OpenPGP card holds your primary key in the signature slot alongside a separate signing subkey, PGPony now recognizes it correctly, so Sign Message and encrypt-and-sign work as expected. Thanks to the testers who reported it.

Version 8.0.0 is a big one. Post-quantum encryption Create keys that pair Ed25519 with ML-KEM-768, so your messages stay private even against future quantum computers. Both the RFC 9580 (v6) and LibrePGP versions are supported, alongside the classic RSA and Ed25519 key types. Back up and move your keyring Save your entire keyring, secret keys included, as a single encrypted file. One backup code opens it, and the same file restores onto another iPhone or onto Android. The file stays with you, not on anyone's server. Signatures for every key type Signed messages now show a clear Signature Verified badge with the signer's name for all key types, including RSA for the first time. Faster decryption Decrypting with a passphrase-protected key is now close to instant, even when your keyring holds a lot of keys. More keyserver control Choose which keyservers PGPony searches and publishes to, publish to several at once, and route lookups through Tor if you want. PGPony tells you up front when a server may not accept a newer key type. Start with a key you already have Setup now lets you import an existing key or restore from a backup, not just generate a new one. There's also a new helper that walks you through picking the right key type, plus a long list of smaller fixes and refinements. Thanks for using PGPony. Questions and ideas are always welcome.

PGPony is now fully localized in Simplified Chinese, with completed translations across German, Spanish, French, Japanese, and Brazilian Portuguese. Fixed: private keys created in PGPony and exported with a passphrase could not be imported into GnuPG or other OpenPGP apps. If you exported a passphrase protected backup of a key you created in PGPony, please export it again after updating. Keys on your device and keys imported from other apps are not affected. Fixed: decrypting with passphrase protected RSA keys. New: Refresh from Key Server on Key Details pulls the latest version of a key, verifies its fingerprint before merging, and detects revocations. Key Details now shows all User IDs on a key. Importing a key you already have now updates the existing entry instead of creating a duplicate. The share extension is now fully localized, and plural forms now display correctly in every language.

PGP/MIME messages. You can now send and receive encrypted messages that carry a body and multiple attachments together, the same format Thunderbird and most desktop mail clients use. In the Encrypt tab, the new Bundle mode lets you write a message, add photos and files, pick recipients, and encrypt everything into a single RFC 3156 .eml, a standalone .asc, or a plain inline block. On the decrypt side, a PGP/MIME message opens to a structured view showing the body and each attachment with a preview and save option. Encrypted .eml files from desktop clients open and decrypt directly. Multi-file share-in. Share two or more files into PGPony from any app and they'll be packaged and encrypted together as one Bundle automatically. Password-protected files. Encrypt any file with a shared password instead of a key, producing a standard .gpg file compatible with GPG on desktop. Decrypt works the same way in reverse, no key needed, and is interoperable with files created by gpg -c. The password prompt appears regardless of which key you have selected. Localization. Applied translation improvements across Brazilian Portuguese, Spanish, French, German, and Japanese, including a community-reviewed pass on the Portuguese strings. Hardware key improvements. Fixed a signing mismatch for offline-primary key layouts where the signing check was comparing against the primary fingerprint instead of the on-card signing subkey. PIN cache duration changes now apply immediately to a PIN already in memory. PIN keyboard. Letters are now the default keyboard for PIN entry, since OpenPGP card PINs can be alphanumeric. Privacy. The Encrypt screen now clears your message, files, and attachments automatically after you close the result, so nothing lingers between sessions. Bug fixes. Decrypting a Bundle and interacting with its attachments no longer freezes the app. Large encrypted files open without freezing. The Email Encrypted Message flow now correctly defaults to the right sending account.

Generate your key on the card itself Create an Ed25519 + Cv25519 key pair directly on a YubiKey, Token2, or other OpenPGP card over NFC. The private key is born on the card and never touches your phone, so there's nothing on the device to leak. On-card keys can't be backed up, and PGPony makes sure you know that before you generate. Full hardware-card management Change the admin PIN, unblock a blocked user PIN, and factory-reset a card, all from your iPhone. Encrypt to a password Encrypt a message or file to a passphrase, no keypair required, for quick shares and self-archiving. Interoperable with gpg -c both ways. Sign and verify files Sign a file to a standalone detached signature, and verify a downloaded file against its .asc or .sig, byte for byte. Also new Encrypt and sign files straight from the Share Sheet Set a default recipient for one-tap self-encryption Password Store: open and decrypt an existing pass store with a software key or a tap of your hardware key PGPony's crypto core is now open source on GitHub (Apache-2.0); there's a link in Settings Every feature is free, with no tracking and no accounts, and your private keys never leave your phone, or your card.

Version 6.2.1 fixes Face ID prompting for signing and decrypting with hardware keys, plus stability improvements.

Version 6.2.0 brings RSA support to hardware security keys. If you carry a YubiKey 5 NFC or a Token2, you can now use an RSA key on it the same way ECC keys already worked: Sign messages on the card Encrypt and sign, including encrypting a copy to yourself Decrypt messages sent to your card's RSA key Change a key's expiration date right on the card It all happens over NFC with a PIN and a tap, and everything interoperates with GnuPG. This rounds out hardware key support so RSA users get the same first-class treatment as everyone else, alongside PGPony's existing OpenPGP v6 (RFC 9580) compatibility. Also in this release: The Decrypt screen's key list is now a searchable picker. It still finds the right key for a message on its own, defaults to the key you use most, and pins your hardware keys to the top. A clearer, larger Paste button when you import a key. Thanks for using PGPony.

When you create your first key during setup, you can now choose between Ed25519 (v4) and the newer OpenPGP v6 format. If you're not sure which to pick, go with v4 for the widest compatibility. iCloud Keychain sync now picks up keys from your other devices without making you relaunch the app. Sync stays off until you turn it on in Settings, so your keys only follow you across devices if you want them to. Also fixed an issue where saving a key that was already synced could fail.

Full OpenPGP v6 support lands in this release. Complete v6 (RFC 9580) workflow: generate v6 keys, encrypt, decrypt, sign, verify, and now revoke them, all interoperable with Sequoia PGP and GnuPG. Generate v6 revocation certificates when a key is compromised, retired, or superseded. Customize the Comment header embedded in your armored PGP output, write your own, keep the default, or turn it off, from Settings. Import GnuPG v4 keys (EdDSA) directly, with passphrase-protected keys supported for signing and decrypting. Scan v6 and v4 keys by QR code, and import keys found through keyserver search. Encrypt files in app and sign with any key; passphrase-protected keys now prompt for the passphrase when signing. Fixes and polish, including a more reliable Share Public Key sheet. Thanks for using PGPony. As always, everything is free.

Version 6.0 brings hardware security keys to PGPony. ▸ Hardware security keys: tap an NFC OpenPGP card like a YubiKey or Token2 to sign and decrypt with a private key that never leaves the card ▸ Add a hardware key to your keyring with a single tap that links it to your public key ▸ Sign on the card three ways: detached signatures, clear-signed messages, and encrypt-and-sign ▸ Messages you decrypt on your card now show the signature banner naming the signer ▸ Change your hardware key PIN right in the app ▸ New Card Details view: manufacturer, serial number, the algorithm in each key slot, creation dates, and remaining PIN attempts ▸ Decrypt hardware-key messages from the Share Sheet, with a hand-off to the app to finish the card tap ▸ Bigger, clearer Paste buttons on Encrypt and Decrypt ▸ Better PIN entry for cards that use letters and symbols, not just numbers Everything is still free. No accounts, no tracking, no data collection. Questions or feedback? NorseHorse@norsehor.se

This update introduces a refreshed app icon. Everything you rely on — secure key generation, encryption, and GnuPG compatibility — works exactly as before. Thanks for using PGPony!

Version 5.0 is the biggest PGPony update yet, focused on signing, verifying, key discovery, and revocation. Signing and verifying New "Sign" mode on the Encrypt tab produces clear-signed messages that anyone with your public key can verify, no encryption needed. Perfect for posts, emails, or files where you want to prove authorship without hiding the contents. Every decrypted message now shows a signature banner with four states: verified by a known signer (green), invalid (red), unknown signer (yellow), or unsigned (grey). Clear-signed messages pasted into Decrypt auto-detect and verify. Tap any yellow "unknown signer" banner to search keys.openpgp.org for the signer's public key, review their identity, and import in one step. The banner refreshes to green without re-decrypting. "Sign as" picker on the Encrypt screen lets you choose which key pair signs outgoing messages when you have more than one. Native Ed25519 signing path verified bit-perfect against GnuPG. Both v4 and v6 signatures supported. Finding keys Looking up a recipient by email now tries Web Key Directory at their own domain first, then falls back to keys.openpgp.org. Keys served from the recipient's own infrastructure are preferred over third-party keyservers. Lookup by fingerprint accepts full v4, full v6, and long key ID formats. Key lifecycle Generate a revocation certificate for any of your key pairs from the Danger Zone in Key Details. Importing the cert in any PGP tool marks the key as revoked. Per-key private key export with full GnuPG compatibility for Cv25519 encryption subkeys. Subkey graph for every key, with proper capability tracking (sign / encrypt / certify / authenticate). First v5.0 launch runs a one-time migration showing brief progress. Languages PGPony now ships in English, German, Spanish, French, Japanese, and Brazilian Portuguese. Switch languages anytime from Settings. Fixes and polish Uploading public keys to keys.openpgp.org now uses the correct request format. First-visit tooltips dismiss permanently on the first interaction instead of reappearing. The App Store review prompt now waits until you've had several successful encryptions or decryptions, and never appears during onboarding, after errors, or after invalid signature verifications. Reliability improvements to clear-signed verification and message decryption. PGPony's privacy model is unchanged: your private keys live in iOS Keychain on this device and never leave it.

A friendlier first launch and a more polished feel throughout. - New five-step welcome tour with optional inline key generation - Help & FAQ in Settings with 13 common questions answered - Security & Encryption reference screen explaining the crypto stack - Contextual tips on each main tab for first-time visitors - Send Feedback and Rate PGPony shortcuts in Settings → Support - Subtle haptic feedback when copying, encrypting, and decrypting - Welcome tour is replayable from Settings → About

Everything is free. Every feature that was previously part of PGPony Pro is now available to all users at no cost. No purchase, no paywall. PGPony 4.0 is the biggest update yet — full GnuPG interoperability, modern cryptography, and powerful new features. NEW: FULL GnuPG 2.4 COMPATIBILITY Import and use Ed25519 + Cv25519 keys generated by GnuPG, Sequoia PGP, and other modern OpenPGP tools AEAD encryption support (OCB mode) for next-generation message security Argon2id key protection — import passphrase-protected keys using the latest key derivation standard Ed25519 digital signatures — sign messages that GnuPG and other tools can verify Round-trip verified: encrypt in PGPony → decrypt in GnuPG, and vice versa NEW: CONTACTS INTEGRATION Link PGP keys to your iOS Contacts automatically by email Contact photos appear throughout the app — keyring, recipient picker, and encrypt view Auto-discover: search keys.openpgp.org for your contacts' public keys with one tap New Contacts tab shows who has keys and who doesn't NEW: FACE ID & TOUCH ID LOCK Biometric lock protects the entire app on launch Optional re-authentication required before each decrypt operation Falls back to device passcode if biometrics fail Configurable auto-lock when the app is backgrounded NEW: SHARE SHEET EXTENSION Encrypt or decrypt text from any app — Safari, Notes, Mail, Messages Select text, tap Share, choose PGPony Compact recipient picker right in the extension No need to switch apps NEW: iCLOUD KEYCHAIN SYNC Sync your keys across all your Apple devices Per-key sync control — mark sensitive keys as local-only Sync status indicators in the keyring NEW: KEY EXPIRATION REMINDERS Local notifications before your keys expire Expired keys display a red badge in the keyring Never get caught with an expired key again ALSO NEW: Improved QR code scanner with full AVFoundation camera support Algorithm auto-detection on key import (RSA, Ed25519, Cv25519) Bug fixes and performance improvements throughout

File Encryption & Decryption Encrypt any file — photos, PDFs, documents, and more. Pick a file, choose recipients, and get a .pgp file you can share anywhere. Decrypt received files just as easily with the new File mode on the Decrypt tab. Ed25519 Key Generation Generate modern Ed25519 + Cv25519 key pairs directly in PGPony. Faster, more compact, and recommended for new keys. Fully compatible with GnuPG and other OpenPGP tools. Also in this update: - Text/File toggle on Encrypt and Decrypt tabs - Share or Save to Files for encrypted/decrypted files - Updated OpenPGP library - Bug fixes and stability improvements