PGP Message Encryption
Encrypt a message with PGP in your browser: paste the recipient's public key, optionally sign it, and copy the armored result. Or use a passphrase only.
How to use PGP Encrypt
- 1Type or paste your message, then paste the recipient's armored public key (or switch to passphrase-only).
- 2Optionally add your private key and passphrase to sign the message, and choose armored text or binary output.
- 3Press Encrypt, then copy or download the result and send it. Only the matching private key can open it.
What makes it better
- Encrypts to one or several public keys, with key IDs, user IDs and expiry shown
- Warns about expired or revoked recipient keys and refuses to use them
- Optional signing with your own private key so the recipient can verify you
- Passphrase-only mode for messages without a key pair
- ASCII armor for pasting into email, or binary .gpg download
About PGP Encrypt
PGP encryption scrambles a message so that only the holder of the matching private key can read it. Paste the recipient's armored public key (several are allowed), type your message and press Encrypt; you can also sign it with your own private key, or encrypt with a passphrase only. Everything runs in your browser with OpenPGP.js, so the message, keys and passphrases are not uploaded.
Common uses
- Send a password, API token or recovery code to a colleague who has published a PGP key.
- Encrypt a note to yourself with your own public key and store it in a shared drive.
- Reply to a security researcher or journalist who asks for PGP-encrypted reports.
- Check that your own public key works by encrypting a test message and decrypting it with your private key.
Example
Input
Meet at the north gate at 9:30. Bring the signed contract — नमस्ते 👋
Result
-----BEGIN PGP MESSAGE----- (armored ciphertext, different every time: it uses a fresh random session key) -----END PGP MESSAGE-----
Good to know
- PGP uses a key pair (anyone can encrypt, only the key holder can decrypt), while the AES tool uses one shared password. Use PGP when you cannot safely share a secret in advance.
- Verify the recipient's fingerprint with them over another channel: a public key pasted from an untrusted source may belong to someone else. This page cannot check a web of trust, manage a keyring or fetch keys from key servers.
- Encryption hides the content but not the fact that you sent a message, who it is addressed to, or its approximate size. Library: OpenPGP.js (LGPL-3.0), loaded in your browser.
PGP Encrypt FAQ
How is PGP different from AES encryption with a password?
AES with a password uses one secret that both sides must already know. PGP uses a public key to encrypt and a private key to decrypt, so you can send something secret to a stranger who only published a public key. PGP's passphrase-only mode behaves like a password tool.
Where do I get someone's PGP public key?
Ask them directly, or find it on their website, in their email signature or on a key server such as keys.openpgp.org. Always compare the fingerprint with the owner over a second channel before trusting it. This page does not fetch keys, so paste the armored block.
Can I encrypt to several people at once?
Yes. Paste several armored public keys one after another in the recipient box. The message is encrypted once and a copy of the session key is wrapped for each recipient, so each person can open it with their own private key.
What does signing add to an encrypted message?
A signature lets the recipient confirm that the message came from the holder of your private key and was not altered. Add your private key (and its passphrase) and the recipient checks it with your public key. Without it, anyone with the public key could have written the message.
Why does the encrypted output change every time?
Each encryption generates a fresh random session key, which is then wrapped for the recipients. Two encryptions of the same text therefore look different, and both still decrypt with the same private key.