Question 1

What is PGP? How to use these keys?

Accepted Answer

PGP (using the open-source OpenPGP standard here) is an end-to-end encryption scheme: each person has a pair of keys. Share your public key so others can encrypt messages for you; only you with the corresponding private key can decrypt them. Conversely, to encrypt for someone else, you need their public key. Keep your private key confidential and set a passphrase for protection.

Question 2

Will keys and messages be uploaded? Is it secure?

Accepted Answer

No. Key generation, encryption, and decryption are all done locally in the browser using OpenPGP.js. Private keys and plaintext are never uploaded or logged, and it can be used offline. Security depends on how you safeguard your private key and passphrase.

Question 3

Which should I choose between ECC and RSA? Can it interoperate with other PGP software?

Accepted Answer

ECC (Curve25519) keys are shorter, faster to generate and compute, and are recommended for modern use; RSA 3072-bit has broader compatibility and is suitable for interfacing with older systems. Both follow the OpenPGP standard, and generated keys and messages are interoperable with compatible PGP tools like GnuPG and ProtonMail.

PGP Encryption

Generate PGP Key Pair

Public Key Encryption

Private Key Decryption

FAQ