Secure 100% CLIENT-SIDE ENCRYPTION - NO SERVER COMMUNICATION - ALL OPERATIONS RUN LOCALLY

PGP Key Pair Generator

Generate a new PGP key pair for secure communication. Your keys are generated locally in your browser and are never transmitted to any server.

Generating keys... This may take 10-30 seconds for 4096-bit RSA keys.
0%

Key Pair Generated Successfully!

Your keys have been generated. Download them immediately and store them securely.

Key Information:

CRITICAL SECURITY INSTRUCTIONS:

  • Save your PRIVATE key to a secure location immediately
  • NEVER share your private key with anyone
  • Remember your passphrase - there is NO recovery option
  • Backup both keys before closing this window
  • Use "Clear All" button after saving to remove keys from memory

Encrypt Message

Encrypt a message using someone's public key. Only the holder of the corresponding private key can decrypt it.

Decrypt Message

Decrypt a message using your private key. You must have the private key that corresponds to the public key used for encryption.

Sign Message

Digitally sign a message using your private key. This proves the message came from you and hasn't been altered.

Verify Signature

Verify a digitally signed message using the sender's public key. This confirms the message came from them and hasn't been tampered with.

oPGPs - OpenPGP Security Suite

Version 1.0 - Complete client-side PGP cryptography tool

What is PGP?

PGP (Pretty Good Privacy) is a data encryption program that provides cryptographic privacy and authentication. It's used for signing, encrypting, and decrypting texts, emails, files, and directories to increase the security of communications.

Quick Start Guide

1. Generate Your Keys

  • Go to the "Generate Keys" tab
  • Enter your name and email
  • Choose a strong passphrase (12+ characters recommended)
  • Click "Generate Key Pair"
  • Download both your public and private keys immediately
  • Share your public key with people you want to communicate with
  • NEVER share your private key - keep it secret and secure

2. Encrypt a Message

  • Get the recipient's public key
  • Go to the "Encrypt" tab
  • Paste the recipient's public key
  • Type your message
  • Click "Encrypt Message"
  • Send the encrypted output to the recipient

3. Decrypt a Message

  • Go to the "Decrypt" tab
  • Paste your private key
  • Enter your passphrase
  • Paste the encrypted message
  • Click "Decrypt Message"

4. Sign a Message

  • Go to the "Sign" tab
  • Paste your private key
  • Enter your passphrase
  • Type your message
  • Click "Sign Message"
  • Send the signed message to recipients

5. Verify a Signature

  • Go to the "Verify" tab
  • Paste the sender's public key
  • Paste the signed message
  • Click "Verify Signature"
  • Check if signature is valid

SECURITY GUARANTEE

This application is 100% secure because:

  • All cryptographic operations run in YOUR browser (client-side only)
  • ZERO network requests are made after page load
  • No data is sent to OPINIONMAN.ORG or any server
  • OpenPGP.js library is self-hosted (no CDN tracking)
  • Content Security Policy blocks external connections
  • Open source code - view page source to verify
  • Works completely offline after initial load

You can verify this:

  • Open browser DevTools (F12) → Network tab
  • Perform any cryptographic operation
  • Observe ZERO network requests

Key Management Best Practices

  • Passphrase: Use 12+ characters with mix of letters, numbers, symbols
  • Backup: Store keys in encrypted USB drive or password manager
  • Expiration: Set keys to expire (1-2 years) and generate new ones
  • Distribution: Share public key via website, keyservers, or email
  • Verification: Always verify key fingerprints through secondary channel
  • Revocation: If private key is compromised, generate a revocation certificate

Technical Details

  • Library: OpenPGP.js v5+ (self-hosted)
  • Algorithms: RSA (2048-4096 bit), ECC (Curve25519)
  • Compatibility: Compatible with GPG, Thunderbird, Proton Mail, others
  • Format: Standard OpenPGP (RFC 4880)
  • Randomness: Uses Web Crypto API secure random number generator
  • Browser Support: Chrome 90+, Firefox 88+, Safari 14+, Edge 90+

Common Questions

Q: Can you recover my passphrase if I forget it?

A: No. Your passphrase never leaves your browser. If you lose it, your private key is permanently locked.

Q: Can someone decrypt my messages without my private key?

A: No. Modern PGP encryption with 4096-bit RSA is considered unbreakable with current technology.

Q: Should I use RSA or ECC?

A: RSA 4096-bit is recommended for maximum compatibility. ECC is newer and more efficient but less widely supported.

Q: Can I use these keys with other PGP software?

A: Yes! Keys generated here are standard OpenPGP format and work with GPG, Thunderbird, Mailvelope, etc.

Q: How do I verify this tool is secure?

A: View the page source, check the Content Security Policy, monitor network requests in DevTools, or run it offline (view page source, save as html file, put openpgp.min.js in same directory, boom it's yours).

About OPINIONMAN.ORG