PGPKit brings OpenPGP key management and messaging to Android
Manage OpenPGP keys and secure messages on a phone: generate, import/export, sign, encrypt, and verify from a mobile interface. Can You Grab It LLC supplies this Android utility with biometric unlocking via Android Keystore and offline cryptographic operations. It includes automatic repairs for damaged PGP blocks and interoperability with desktop OpenPGP engines. The app targets privacy-conscious users, journalists, and security professionals who need local, mobile access to standard PGP workflows.
What core OpenPGP tasks can it perform?
PGPKit handles standard OpenPGP operations: encrypting, decrypting, signing, and verifying messages. It can generate, import, and export both RSA and Elliptic Curve keys, and it manages a local keyring for contact public keys. The app states verified interoperability with GnuPG, Sequoia, RNP, and GopenPGP, so messages and keys created on the phone can be read by desktop clients that use those engines.
How does it interact with the device during cryptographic work?
Operations run locally and offline: all cryptographic functions are performed on-device with no server contact, and the app supports Android 7.0 or later for full functionality. Biometric access uses the Android Keystore to unlock keys instead of typing a passphrase every time. The offline design means CPU and storage I/O are the main system impacts during a crypto task, and no network latency is involved.
Is it safe to use on a production device?
Security practices prioritise local control: the developer enforces a strict no-cloud policy, so private keys never leave the phone and the app does not create accounts or collect analytics. The source notes the code used AI-assisted tools but that the implementation was tested against established OpenPGP implementations, and biometric protection via Keystore reduces exposure from weak passphrases.
Do non-technical users need specialist knowledge to operate it?
Basic workflows are guided, with advanced options available: the app offers a smart Paste feature that repairs PGP blocks mangled by mail clients, which reduces manual fixes. Casual users can perform everyday encrypt/decrypt tasks, while power users can access file encryption and more advanced signature modes. Large-file encryption and standalone signatures are present as higher-tier capabilities.
Recommended for mobile users who need on-device PGP; advanced file features are gated
PGPKit suits anyone who must keep keys and message operations entirely local on Android, offering biometric unlocking and repair tools for mobile-specific PGP problems. Its adherence to a no-cloud policy and tested interoperability make it a practical mobile OpenPGP tool. The single major trade-off is that certain advanced file- and signature-related capabilities are gated behind the app's higher tier, which some users may need.
