PGPTool

PGPTool allows you to encrypt and decrypt files.
It's free and easy to use.

Available for Windows, Linux and MacOS

FEATURES AND BENEFITS

Encrypt and Decrypt PGP files without hassle

  • Automatically suggests encryption/decryption parameters based on your previous actions — no need to enter everything manually every time
  • Helps to avoid leaving sensitive data in un-encrypted state
  • Compatible with OpenPGP specification
  • Supports multiple platforms: Windows, Linux and MacOS
image

Download

Application requires Java Runtime Environment 17+
(see below for more details)

Windows Installer package

It is as simple as downloading and installing this MSI package.

NOTE: In case you're using non-Oracle JRE, you'll have to a) set JAVA_HOME environment variable to point to JRE location, OR b) use zip package instead

(~32mb)

ZIP package (any Operation System)

Alternative way of running PGPTool on any operation system which has JRE installed. Details can be found here Bottom line: you’ll need to download, unzip and run it using java. If Double-click doesn’t work, then run following command line: 

java -jar pgptoolgui-0.6.0.0.jar

(~32mb)

Java Runtime Environment

Option 1: Oracle JRE

Technically, the easiest and conventional way of getting JRE is getting it from official Oracle website

But Oracle decided to charge for JRE, that's why you might want to use Option #2 which also works, but not as plug-n-play as Oracle's

Option 2: Alternative JREs

There are number of alternative JRE distributions. I recommend to use Amazon's Corretto

NOTE: In case you're using Windows Installer package for PGPTool, you'll have to set JAVA_HOME environment variable to point to JRE location. Here are the step-by-step instructions on how this can be done


Screenshots

NOTE: Screenshots are taken from the older version.

Encryption window

Decryption window

Monitoring decrypted

USER FRIENDLY

PGP Tool is at least 200% more user friendly than others.
Here are the details why:

Encryption/Decryption is not a goal itself, it’s a way to achieve goal -- safety for sensitive data.

There are couple common scenarios:

  1. You’ve created a file that contains sensitive information and you need to store it or send it over the network
  2. You’ve received encrypted file and you need to read the contents, maybe update it and encrypt and send it back

In all these scenarios you also need to make sure sensitive information will not remain in un-encrypted state.

Now let’s see what it takes to achieve this using PGP Tool versus Average PGP software (LESS actions -- better)

SCENARIO #1: Encrypt the file

(presuming you've already encrypted at least one file from the same folder)

PGP Tool

  1. Locate file using the file explorer
  2. Open context menu and choose “PGP Encrypt”
  3. Click Encrypt

Average PGP software

  1. Open PGP application
  2. Trigger encryption action
  3. Browse for source file
  4. Browse for target file
  5. Select recipients
  6. Click Encrypt
  7. Open file explorer and locate source (un-encrypted) file, delete it
  8. Locate target (encrypted) file

The "magic" happens because PGP Tool application remembered:

  • Where to place encrypted file
  • List of recipients to encrypt for
  • Whether or not to delete source file
  • Whether or not to open target folder


SCENARIO #2: Decrypt, edit, encrypt back

PGP Tool

  1. Locate file using the file explorer and Double-click
  2. Enter the passphrase (might not be needed if remembered)
  3. Confirm decryption. Edit file using associated application. Close it
  4. Return to PGP Tool application
  5. For the file in history click “Encrypt back"
  6. Confirm parameters and click Encrypt

Average PGP software

  1. Open other PGP software
  2. Trigger decryption action
  3. Browse for input file
  4. Browse for output file
  5. Enter the passphrase
  6. Confirm decryption
  7. Open file explorer and browse for target folder
  8. Double click on un-encrypted file. Edit file using associated application. Close it.
  9. Open PGP application
  10. Trigger encryption action
  11. Browse for source file
  12. Browse for target file
  13. Select recipients
  14. Click Encrypt
  15. Open file explorer and locate source (un-encrypted) file, delete it
  16. Locate encrypted file in a file browser

The "magic" happens because PGP Tool application:

  • Keeps track of decrypted files thus it can suggest encryption options (you do NOT need to remember recipients for each file when you’re encrypting it back)
  • Opens target application automatically
  • Automatically deletes un-encrypted version of file from the disk
  • Provides a list of monitored decrypted files to give you easy access to them

Help

Screen casts


Have a question?

Please be sure to check out FAQ for common questions first.

Then feel free to ask any questions using:

Discovered a defect?

We’re sorry to hear that !

Please file a defect report by creating an issue on a Github. Please make sure to describe:

  • All steps one can take to reproduce this issue
  • Tell us about your program and operation system type and version, i.e. PGPTool v0.6.0.0, Windows 10
  • Provide relevant screenshots
  • Any other info concerning this issue

Frequently Asked Questions

Question: Why I might need to use this PGP Tool?

Answer: It will help you to make sure that sensitive data like your bank accounts, passwords and/or confidential documents will be available only to the designated people.

You encrypt this information and then you can safely store it locally, in the cloud or send via email.

Even if you save it to the USB Flash drive and leave it in the center of the city, no one except authorized people will be able to read this data.

Question: How does it work?

Answer: On a high level it works like this:

  • First of all you need to create PGP key-pair
  • it’s called a key-pair because there is a pair of keys - private and public
  • When file is encrypted (locked) with a Public key it’s considered safe (unauthorized people will not be able to unlock it and read the contents). File can be encrypted with multiple public keys (presuming multiple people are allowed to access the file)
  • if Alice wants to encrypt file so that only Bob can decrypt it she needs to ask Bob to send his public key and select only this key when encrypting file
  • One of the matching Private keys is required to decrypt (unlock) the file. Passphrase is required to use private key
  • To avoid jeopardizing the whole security idea NEVER share your private key with other people and DO NOT send private key over the internet

Question: What is OpenPGP ?

Answer: PGP stands for Pretty Good Privacy. Prefix "Open" means that this is open standard, many applications support it.

OpenPGP software uses a combination of strong public-key and symmetric cryptography to provide security services for electronic communications and data storage. These services include confidentiality, key management, authentication, and digital signatures.

For those who wants to know more technical details you can start with this article on Wikipedia

Question: How do I restore lost private key (or its passphrase)?

Answer: Unfortunately, there is no way to do it. If you possess private key but forgot its passphrase, you might be able to bruteforce it, but PGP Tool does not offer functionality to do so.

Question: How to delete decryption history?

Answer: There is no option for this in the application itself because it goes against the whole idea of this application. But you can delete respective file from the filesystem if needed. Go to your user home folder and delete file

.pgptool\configs\ConfigPairsEnvelop.decr-params

Question: How to delete files to recycle bean?

Answer: There is no option for this in the application because it contradicts with the idea of manipulating sensitive data.

Question: How to secure delete files so that they leave zero traces on the storage media?

Answer: Practically speaking, there is no way to do it. With HDDs we could've made fair attempt, but nowadays we mostly use SSDs, and with them it is practically impossible. If you're super concerned about leaving any traces of decrypted information, then create RAM disk (google how to do it) and decrypt into RAM instead of physical disk

Also, there are two alternative options:

  1. For text files only: decrypt them in memory without saving on disk
  2. Decrypt text instead of files - PGP Tool has option to decrypt text from clipboard

Question: How to change location of application configs?

Answer: This is usually needed only by a small subset of advanced users. If that is your case, then create file...

custom.properties

... near the pgptoolgui-0.6.0.0.jar file (located in the installation folder), and add following line (replace "d:\\" with the path you need):

configs.custom-base-path=d:\\

... then save this file, close application, move existing configs folder "user home"/.pgptool to the specified path (in the example above "d:\\.pgptool") and start application again

Contribute

You can help to make this application even better and feature rich!

Missing a feature?

This project is not just a Free software it’s also an Open Source project! You can contribute!

Which effectively means that there are number of ways to get what you want:

  • The bare minimum you can do is you can check if this feature was already requested here (it might be on it’s way).
  • If it’s not there you can add new one Please make sure to describe anticipated "how to demo" scenario (user case) and all possible side-effects/intersections with other features you can think of

Support this project

  • If you’re a happy java developer please feel free to contribute by submitting pull requests (be sure to follow project charter )
image
Sergey Karpushin

Senior Project Manager at Auriga Inc.

Hi there! I'm creator and maintainer of this project. I hope it helps you as much as it helps me to minimize routine operations and increase data security when working with PGP encrypted files.

If you enjoy this program and want to express it, you can always
Buy me a coffeeBuy me a coffee

Couple words about me:

Both my work and hobby are related to software development. I worked as a C++ and C# developer. I've succeeded as a Java Developer, Team Leader, and a Project Manager.

I'm passionate and enthusiastic about software development. Primarily because I love when technology enables people to focus on creative work rather than on routine tasks.