Case file 001 / Free OpenPGP app

OpenPGP, without the pain.

Encrypt, sign and share keys from a simple desktop app. No gpg binary, no terminal, no cryptic errors.

Download View source

GPL-3.0 · macOS, Windows, Linux · latest release

Custody label

No. — — —

From
Alice Rossi
To
Bruno Marchi

Open. Anyone can read this.

Press and hold, or press Enter. This is a demo: nothing is encrypted in your browser.

Standard OpenPGP. Works with

  • GnuPG
  • Thunderbird
  • Proton

Chain of custody

Three moves from file to inbox

GnuPG is powerful but hostile. AegisGPG puts the everyday jobs behind drag and drop, and explains errors in plain words.

  1. Drop a file

    Drag anything in. Multi-gigabyte files stream in the background, so the app never freezes and you see real progress.

    00:00 FILE RECEIVED
    tax-return.pdf

  2. Choose who can open it

    Pick contacts or a whole team. Your own key is added too, so you can always reopen what you sent.

    00:04 RECIPIENTS SET
    Bruno, Chiara, you

  3. Send by mail

    One click opens your mail app with a new draft and the encrypted file already attached.

    00:06 SEALED, ATTACHED
    tax-return.pdf.gpg

Inventory

Everything in the bag

  • K-01

    Key manager

    Generate Ed25519 or RSA 4096 keys, import, export, set an expiry and a passphrase.

  • E-02

    Encrypt and sign

    Pick recipients, sign with your key, choose binary or ASCII-armored output.

  • D-03

    Decrypt and verify

    See at once whether the signature is valid, invalid or from an unknown signer.

  • M-04

    Send by mail

    Opens Apple Mail, Outlook or Thunderbird with the encrypted file attached.

  • T-05

    Teams

    Group contacts and encrypt for everyone at once.

  • F-06

    Find and sync keys

    Look up keys on keys.openpgp.org, by Web Key Directory or on keyserver.ubuntu.com. Catch revocations early.

  • Q-07

    QR sharing

    Share a fingerprint or a compact public key as a QR code.

Web of trust graph You certify Bruno and Chiara, who certify Dario and Elena. Solid lines are fully trusted, dashed lines marginal or unknown. You BM CL DF EG FM GP HV
W-08 Web of trust. Signatures are cryptographically verified, not just read.

Inspection report

Private by design, honest about limits

The cryptography runs in Rust on Sequoia-PGP and speaks standard OpenPGP, so your keys and files stay compatible with the tools you already have.

  • Least privilege

    The app window has no filesystem access. Only files you pick or drop are opened.

  • Secrets wiped from memory

    Passphrases and key material live in buffers that are zeroed when released.

  • Downloads treated as hostile

    Keys from servers lose any secret material, are size-capped and fetched over HTTPS only.

  • Private by default

    Keys and settings stay on your device, with owner-only file permissions.

  • Signed updates

    Every update is verified against a public key built into the app.

Release

Get AegisGPG

Free and open source under GPL-3.0. Latest release on GitHub.

Questions

Before you ask

Do I need GnuPG installed?

No. AegisGPG runs the cryptography itself, in Rust, on the Sequoia-PGP library. There is nothing to install besides the app.

Are my keys and files compatible with GnuPG, Thunderbird and Proton?

Yes. AegisGPG speaks standard OpenPGP, so keys and encrypted files work with GnuPG, Thunderbird, Proton and other OpenPGP tools.

Has it been audited?

No. It has not been independently audited, and Sequoia flags its pure-Rust crypto backend as experimental. For high-stakes use, read the code and prefer a hardware token.

Why does my system warn me when I open it?

The builds are not code-signed yet. On macOS choose Open Anyway in Privacy & Security; on Windows choose More info, then Run anyway.

Where are my keys stored?

On your device only, in the app data folder, with owner-only file permissions. Secret keys are only protected if you set a passphrase, and the app warns you if you skip it.

Is it free?

Yes. It is free and open source under the GPL-3.0-or-later license.