Generate RSA and Curve25519 PGP keypairs, encrypt or decrypt armored messages, and create or verify digital signatures client-side.
Use disposable test keys to learn encryption and signature workflows. These examples do not establish the real-world identity of a key owner.
A different private key will not decrypt the message for this recipient. Save the test keys if you need to repeat the exercise after leaving the page.
Editing the signed text should cause verification to fail. A valid signature establishes correspondence to the supplied key, not independently verified authorship.
Authenticate public-key fingerprints separately. Store private keys and passphrases securely and use test material for shared examples.
The Free PGP Keypair Generator & Encrypter is an end-to-end cryptographic suite providing OpenPGP key creation, message encryption, decryption, digital signing, and signature verification directly in your browser. Pretty Good Privacy (PGP) and the OpenPGP standard remain the international benchmark for asymmetric email encryption, secure developer communications, Git commit verification, cryptographic identity management, and confidential document transmission across untrusted networks. Whether generating your first cryptographic identity or decrypting sensitive correspondence, this studio executes all computations in local memory.
Executing PGP operations traditionally requires complex command-line GnuPG (GPG) installations and keystore management that create friction for non-technical users or engineers working on restricted enterprise workstations. Our browser tool integrates OpenPGP.js and modern Web Crypto primitives to handle cutting-edge Curve25519 (Ed25519) and classical RSA (2048-bit and 4096-bit) key generation, armored ASCII block encryption, and cryptographic signature validation entirely in local client memory without third-party server exposure or analytics tracking.
Create password-protected public and private keypairs, encrypt sensitive messages using a recipient public key, decrypt armored ciphertext blocks with your private key and passphrase, or create cleartext detached signatures to guarantee message authenticity and tampering resistance. Export standardized .asc ASCII-armored key certificates for instant integration into email clients, password managers, and developer toolchains.
Generate high-strength RSA or Curve25519 keypairs with user credentials, or paste existing ASCII-armored public/private keys.
In Encrypt mode, paste your message and recipient public key. In Decrypt mode, input the armored block and private key passphrase.
Sign messages with your private key to prove authorship, or verify incoming messages against a sender public key to detect tampering.
Copy armored blocks or download standardized .asc key files directly to your device for immediate email and Git integration.
Supports high-performance Curve25519 (Ed25519) as well as enterprise-compatible RSA 2048-bit and 4096-bit key architectures.
Generates RFC 4880 and RFC 9580 compliant -----BEGIN PGP PUBLIC KEY BLOCK----- and message headers for universal compatibility.
Generates detached cryptographic signatures and verifies cleartext signed messages against known sender public keys.
Private keys and passphrases never touch remote network servers or third-party cloud storage, safeguarding your master identity.
Asymmetric PGP cryptography guarantees that public keys can only encrypt messages, while only matching private keys can decrypt them. Protect your private key with a strong passphrase.
Use disposable sender and recipient keys to learn the public-key encryption and private-key decryption workflow.
Compare verification of unchanged and edited signed text, using a public key whose origin you have checked.
| Cryptographic Scheme | Key Length & Mathematical Primitive | Security Level & Recommended Application |
|---|---|---|
| Ed25519 / Curve25519 | 256-bit Twisted Edwards / Montgomery Curve | 128-bit security; ultra-compact keys, fast signing, modern default |
| RSA 4096-bit | 4096-bit Integer Factorization | 128-bit security; maximum enterprise legacy software and HSM compatibility |
| RSA 2048-bit | 2048-bit Integer Factorization | 112-bit security; minimum acceptable classical standard, fast operations |
| ASCII Armoring | Radix-64 with CRC24 checksum | Permits safe key and message transmission across 7-bit email channels |
| Detached Signature | Cryptographic hash signed by private key | Proves document authorship and integrity without altering original file |
Curve25519 is modern, provides high security with smaller key sizes, and executes much faster than RSA. RSA (3072 or 4096-bit) is recommended if you must maintain compatibility with older legacy email clients or enterprise servers.
No. Asymmetric cryptography ensures that anyone can encrypt a message using your public key, but only the holder of the matching private key (and passphrase) can decrypt and read it.
ASCII Armor encodes binary OpenPGP packets into printable base64 characters enclosed within standardized header lines, allowing keys and encrypted ciphertext to be shared safely via email, SMS, or plain text files.
An internet connection is required to open tools and refresh a temporary session. Processing stays on your device; the handshake sends a random challenge, not files or text inputs. Libraries, fonts or models may download. Local processing cannot remove risks from an untrusted device or extension.
