Instant PGP 4+

Nice to play with, but don’t think for one minute that this is foolproof

This is a PGP app so the main user base are going to be quite technical people. However this app has some really bad design choices that mean I can’t recommend this at all.

Firstly, if you put a pass phrase for your public key if you view your key it shows the pass phrase just out in the open with no password char hiding it

Secondly, stop advertising your app in my encryptions.

Thirdly, why are you storing the passphrase on the app. This is the last line of defence is someone gets your private key. Storing it in the app means anyone with access to the app can get your pass phrase just as easily as your key.

Fourthly, when you input any key there is a very small box to edit the text and a very large button the paste from clipboard again. This makes it very easy to try to edit the text and end up pasting the key in again

Finally, your data collection is suspicious at best. You don’t report what data you collect for a start. Secondly, analytics data is an opt out feature without telling the user where to opt out.

Overall, DO NOT download this app if you care about transparency and protecting your private key when using the app anywhere where someone could see your phone

Why is the dev not reporting what data they are collecting?

Until a report has been submitted I would not use this app at all, especially not sensitive information.

I’ll try it again when a report has been submitted.