Is this tool secure?
Yes. All encryption and decryption happen locally in your browser using the openpgp.js library. No keys or messages are ever sent to our servers.
Why use URL hashes?
URL hashes (the part of the URL after the # symbol) are not sent to the server when you visit a link. This means the data in the hash remains entirely on the client side.
Can I recover a lost private key?
No. We do not store your keys. If you lose your private key, you will not be able to decrypt any messages sent to you.
What if I forget my passphrase?
If you protected your private key with a passphrase and forget it, the key cannot be used to decrypt messages.
Does this work offline?
Yes, once the page is loaded, it works entirely offline.
Can I encrypt files?
Yes! You can toggle between 'Text' and 'File' mode to encrypt sensitive files up to your browser's memory limits.
What is PGP?
PGP (Pretty Good Privacy) is an encryption program that provides cryptographic privacy and authentication for data communication.
Who can read the encrypted message?
Only the person possessing the private key corresponding to the public key used for encryption can read the message.
Do I need to install anything?
No, it works directly in your web browser.
Can I use keys generated elsewhere?
Yes, you can paste any valid PGP public or private key block into the respective fields.
Are the keys stored in my browser?
No, we do not store keys in LocalStorage or cookies to maximize security. You must save them yourself.
How large of a message can I encrypt?
Theoretically very large, but since you are sharing via URL hash, you may run into browser URL length limits (typically around 2000 characters). For larger data, use File mode.
Is the encryption quantum-safe?
This uses standard RSA-4096, which is highly secure against classical computers but not theoretically quantum-safe.
Is openpgp.js reliable?
Yes, openpgp.js is a widely used and audited JavaScript implementation of the OpenPGP protocol.
Can I verify who sent the message?
This basic tool focuses on encryption for confidentiality. It does not currently support adding cryptographic signatures to verify the sender.