# OpenKeychain privacy rating

OpenPGP app for Android that manages keys and encrypts, decrypts and signs messages and files, on its own or through other apps such as K-9 Mail. In maintenance mode: security fixes only, no new features.

## Summary

OpenKeychain scores 90 out of 100 (grade A) on the PGP tools criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets independent audit. It is based in Germany: Fourteen Eyes member; EU member (GDPR).

- Website: https://www.openkeychain.org
- Source code: https://github.com/open-keychain/open-keychain
- License: GPL-3.0
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [PGP tools](https://privacyratings.com/pgp-tools/)
- Grade: A (90/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-3.0. | https://github.com/open-keychain/open-keychain/blob/master/LICENSE |
| No trackers or telemetry | Yes | Exodus finds no trackers in the Android app. | https://reports.exodus-privacy.eu.org/en/reports/org.sufficientlysecure.keychain/latest/ |
| No ads or data sales | Yes | Funded by donations and sponsorship from heylogin. No ads. | https://www.openkeychain.org |
| Independent audit | Partial | Cure53 published a full audit report, but it is older than three years. | https://cure53.de/pentest-report_openkeychain.pdf |

Source: https://privacyratings.com/pgp-tools/openkeychain/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/pgp-tools/openkeychain.md