GPG Vault

OpenPGP with a decoy vault

GPG Vault keeps your OpenPGP keys on your iPhone and gives you a duress code that opens an empty vault if someone forces you to unlock the app.

It's made for journalists, teams at high-risk companies, and anyone who needs PGP without a long setup. Paste an encrypted message and GPG Vault finds the right key to open it.

Coming soon to the App Store

GPG Vault showing a verified signature and who signed the message

What GPG Vault does

Encrypt messages for anyone in your keyring, and sign them with your own key
Decrypt by pasting, and the app picks the key for you
Verify a signature and see who signed it
Create an RSA 3072 key or import one you already have
Check every key by its fingerprint, and keep notes on each one
Keys are stored in the iPhone's Keychain. iCloud sync and backups stay off unless you turn them on
A duress code opens an empty vault and can also erase your keys
Locks with a passcode and Face ID, and hides its contents in the app switcher
A copied public key clears from the clipboard after two minutes
Exporting a secret key shows a warning and asks you to unlock again

See it on iPhone

Verified signature screen showing who signed a message — See who really signed it

New encrypted message addressed to two recipients — Send messages only they can read

Decrypt screen with a pasted PGP message — Decrypt with one paste

Key details showing the fingerprint and key ID — Make sure a key is really theirs

Passcode lock screen — Fully offline, with locks you choose

Security settings with the duress passcode turned on — A duress code for the worst day