PGPony 3.0.1
Maintenance release. Fixes a duplicate launcher-icon resource that prevented a clean build from source.
PGPony is an OpenPGP app that runs entirely on device: encrypt, decrypt, sign, verify, manage your keyring, and use a hardware security key over NFC. The full app source is public under Apache-2.0, and the FOSS build ships with no Google services.
Changes in 3.0.1
- Removed duplicate PNG launcher icons that collided with the WebP versions and broke a from-source build
Features
- On-card key generation for hardware security keys (Ed25519 and X25519) over NFC
- Full smartcard support on YubiKey 5 NFC and Token2: decrypt, sign, encrypt-and-sign, user and admin PIN management, factory reset, for both RSA and 25519 keys
- RFC 9580 (OpenPGP v6) key generation with Argon2id passphrase protection
- Read-only Password Store (pass) support, including entries protected by a hardware key
- Open-source cryptographic core, published separately as PGPonyCore-Kotlin
- Biometric lock and secure-screen protection
- Key discovery through WKD and the keys.openpgp.org verifying keyserver
Install
The FOSS APK is attached to this release, signed with the project release key. F-Droid and IzzyOnDroid listings are on the way.
Verify
- APK SHA-256:
095c0d8c2fd3e4920a5da26b4c7c1c73c473cd2ce80f73184daea37b7bfc7012 - Signing certificate SHA-256:
446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc
Privacy
No accounts, no ads, no analytics, no tracking. The FOSS build contains no Google services and runs fully on de-Googled devices.
Source: https://github.com/norsehorse-dev/PGPonyAndroid
Crypto core: https://github.com/norsehorse-dev/PGPonyCore-Kotlin