PGP tool privacy ratings
Apps for managing OpenPGP keys and encrypting messages.
8 PGP tools are rated against 4 public criteria, and 8 have enough evidence for a letter grade. Of the 7 with a known jurisdiction, 1 is based in a Five Eyes country, and 5 in the wider Fourteen Eyes.
Open-source PGP tools only · Criteria for this category · Suggest an addition · Markdown
| Name | Grade | Score | Data | Jurisdiction | Open source | No trackers or telemetry | No ads or data sales | Independent audit |
|---|---|---|---|---|---|---|---|---|
Browser extension that adds OpenPGP encryption to webmail services such as Gmail, Outlook.com and many others. Business editions integrate with Google Workspace and Nextcloud. |
Grade A | 100 | 100% | Germany Fourteen Eyes | Yes | Yes | Yes | Yes |
OpenPGP app for Android that manages keys and encrypts, decrypts and signs messages and files, on its own or through other apps such as K-9 Mail. In maintenance mode: security fixes only, no new features. |
Grade A | 90 | 100% | Germany Fourteen Eyes | Yes | Yes | Yes | Partial |
GnuPG distribution for Windows that bundles the Kleopatra certificate manager and the GpgOL plugin for Outlook for encrypting and signing files and email. |
Grade B | 80 | 100% | Germany Fourteen Eyes | Yes | Yes | Yes | No |
KDE certificate manager and graphical front end for GnuPG. Manages OpenPGP and X.509 certificates, encrypts, decrypts, signs and verifies files, and retrieves certificates from LDAP servers. |
Grade B | 80 | 100% | Germany Fourteen Eyes | Yes | Yes | Yes | No |
GNOME app, shown as Passwords and Keys, for managing PGP and SSH keys and the passwords stored in GNOME Keyring. |
Grade B | 80 | 100% | United States Five Eyes | Yes | Yes | Yes | No |
GnuPG distribution for macOS with key management, Finder and system service integration, and GPG Mail, an OpenPGP plugin for Apple Mail that requires a paid support plan. |
Grade C | 65 | 100% | Austria Outside Eyes | Yes | Partial | Yes | No |
iOS app for encrypting, decrypting and signing text and files with PGP, with a custom keyboard for use inside other apps. It has not received updates for several years. |
Grade D | 50 | 100% | – | No | Yes | Yes | No |
Browser extension for OpenPGP email encryption in Gmail on Chrome, Firefox and other browsers, with companion apps for Android and iOS. |
Grade D | 45 | 100% | Czechia Outside Eyes | Partial | No | Yes | Partial |
Questions
What is the most private option among PGP tools?
No pick has been made yet. The table above is sorted by score, based on public evidence.
How are PGP tools rated?
Each entry answers 4 questions: open source, no trackers or telemetry, no ads or data sales and independent audit. Answers need links to evidence. See the full criteria.
Does jurisdiction matter?
Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.