Is PGP Tool safe to use?

Yes. PGP Tool runs 100% in your browser — no data is ever sent to a server. All encryption and decryption happens client-side using openpgp.js. The code is open source under MIT license.

Can I use PGP Tool offline?

Yes. PGP Tool is a Progressive Web App (PWA) that works fully offline once installed. Enable air-gap mode to disable all network requests for maximum security.

What encryption algorithms does PGP Tool support?

PGP Tool supports RSA (2048–4096 bit) and ECC (Curve25519, P-384) for PGP key generation, AES-256-GCM for symmetric encryption and secure paste, and PBKDF2 with SHA-256 for key derivation.

How does the password generator work?

The password generator uses the browser's crypto.getRandomValues() API for cryptographically secure randomness. It supports random character passwords (6–128 chars) and EFF-wordlist passphrases (3–10 words). No passwords are stored or transmitted.

How does Secure Paste work without a server?

Secure Paste encodes the paste content directly into the URL fragment (after the # symbol). Optionally, content is encrypted with AES-256-GCM before encoding. The URL IS the paste — no server or database is involved.

Which hashes are supported?

SHA-256, SHA-512, SHA-1, and MD5 — all via WebCrypto. SHA-1 and MD5 are kept for verifying legacy checksums; do not use them for security-sensitive work.

Is my input sent anywhere?

No. WebCrypto runs locally; there is no network round-trip for any utility on this page.

What does the key-diff tool show?

It compares fingerprints, user IDs, subkey list, expiry dates, and any signature differences between two armored keys. Useful for spotting tampering or confirming a clean key rotation.

Can I hash a file or only text?

Either. The tool has a paste box for text and a drop zone for files.

What is the URL-encoding option for?

For sharing PGP messages or fingerprints in URL parameters. Standard percent-encoding turns special characters into %XX sequences so they survive web frameworks intact.

PGP utilities — hash, encode, key diff

A grab-bag of crypto-adjacent helpers: SHA-256/512 hashing, hex/Base64/URL encoding, PGP key diffing. All client-side.

Utilities collects the small operations that surround a PGP workflow but don't deserve their own page. Compute file or string hashes (SHA-256 / SHA-512 / SHA-1 / MD5), convert between hex / Base64 / URL-encoding, or diff two PGP keys to see exactly which subkey or user-ID changed.

Hashing is useful for verifying downloads against published checksums, comparing file integrity across copies, or producing a fingerprint of arbitrary content. The diff utility is handy when reviewing a friend's updated public key or auditing a key rotation.

Like every other tool, Utilities runs entirely in your browser — pasting a 4 GiB file works as long as your machine has the memory.

Frequently asked questions

Which hashes are supported?: SHA-256, SHA-512, SHA-1, and MD5 — all via WebCrypto. SHA-1 and MD5 are kept for verifying legacy checksums; do not use them for security-sensitive work.
Is my input sent anywhere?: No. WebCrypto runs locally; there is no network round-trip for any utility on this page.
What does the key-diff tool show?: It compares fingerprints, user IDs, subkey list, expiry dates, and any signature differences between two armored keys. Useful for spotting tampering or confirming a clean key rotation.
Can I hash a file or only text?: Either. The tool has a paste box for text and a drop zone for files.
What is the URL-encoding option for?: For sharing PGP messages or fingerprints in URL parameters. Standard percent-encoding turns special characters into %XX sequences so they survive web frameworks intact.