Encrypt and decrypt messages using PGP public/private keys with OpenPGP.js, fully client-side.
PGP pairs a public key, which anyone can use to encrypt a message to you, with a private key that only you hold and that alone can decrypt it. This tool does both directions in the page: paste the recipient's public key with your plaintext to get an armored PGP MESSAGE block, or paste a ciphertext block with your private key and passphrase to recover the plaintext. Everything runs client-side with OpenPGP.js, so your keys never leave the browser. The common surprise: decryption uses a different key than encryption, and a message encrypted to your key cannot be opened by anyone else.
The tool parses the recipient's public key from an armored block, generates a fresh random session key, encrypts the message with that session key, encrypts the session key to the recipient's public key, and assembles the results into an armored PGP MESSAGE block with a base64 CRC24 checksum line at the end. Because the session key is random, encrypting the same text twice yields different ciphertext every time.
The message's leading packets record the key ID of the intended recipient. The tool matches that ID against the private key you pasted, uses it to unwrap the session key, decrypts the message, and checks the modification-detection code that catches tampering. If the pasted key is not the real recipient, or the passphrase is wrong, decryption fails with an error instead of showing garbage.
Likely you encrypted to someone else's public key and then tried to decrypt with your own key: a message can only be decrypted by the private key that matches the public key it was encrypted to. To test, encrypt to your own public key first. Also check the passphrase: a key created with one requires it on every decrypt.
The tool is designed to run entirely in the browser with OpenPGP.js, so by its design no key material is uploaded anywhere. That still leaves you trusting the page itself: load it over HTTPS on a device you control, and clear the private key from the inputs and your clipboard when you are done. For highly sensitive keys, consider a dedicated key program instead.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.