AegisGPG

OpenPGP, without the pain.

A modern, minimal desktop app to manage keys, encrypt, sign and build your web of trust. No gpg binary required.

Download View source

macOS · Windows · Linux · free and open source (GPL-3.0)

Tauri v2Rust · Sequoia-PGPSvelte 5Tailwind v4
Features

Everything you actually do with OpenPGP

GnuPG is powerful but hostile. AegisGPG puts the common tasks behind a clean, keyboard-friendly interface with dark mode, drag & drop and clear error messages instead of cryptic exit codes.

Key manager

Generate Ed25519 or RSA 4096 keys, import from files or text, export public or secret keys, with optional passphrase and expiry.

Encrypt and sign files

Drop any file, pick recipients, sign with your key. Streaming I/O with a live progress bar, so multi-gigabyte files never freeze the app.

Teams

Group contacts into teams and encrypt a file for everyone at once. Your own key is added automatically so you can always reopen it.

Web of Trust

An interactive trust graph, ownertrust, computed validity and a guided dialog to certify keys. Signatures are cryptographically verified.

Discover and sync

Find keys via keys.openpgp.org, Web Key Directory or keyserver.ubuntu.com. Publish yours, refresh contacts and catch revocations.

QR sharing

Share a fingerprint or a compact public key as a QR code, save it as PNG or SVG, and import from an openpgp4fpr: link.

Security

Built to be boring where it matters

The cryptography runs in Rust on Sequoia-PGP with a pure-Rust backend, and speaks standard OpenPGP: your keys and files stay compatible with GnuPG, Thunderbird and Proton.

Heads-up: AegisGPG has not been independently audited, and the pure-Rust crypto backend is flagged experimental by Sequoia. For high-stakes use, review the code and prefer a hardware token.
  • Least privilege. The webview has no filesystem access; only files you pick or drop are opened, under a strict CSP.
  • Secrets wiped from memory. Passphrases and key material live in zeroizing buffers.
  • Untrusted downloads handled. Keys from servers are stripped of secret material, size-capped and HTTPS-only.
  • Private by default. Keys and settings stay on your device with owner-only file permissions. Avatars can be switched off.
  • Signed updates. Updates are verified against a public key built into the app before installing.
Download

Get AegisGPG

Latest release on GitHub.

Unsigned builds. AegisGPG is not yet notarized or code-signed with a paid certificate, so your OS will warn you the first time. On macOS open System Settings → Privacy & Security → Open Anyway; if the app is reported as damaged, run xattr -cr /Applications/AegisGPG.app. On Windows choose More info → Run anyway. You can always build it from source.