Create a PGP key, encrypt, decrypt

Good to know

How does PGP work?

You get two keys. The public key is meant to be shared: anyone can use it to encrypt a message that only you can read. The private key stays with you: it decrypts those messages, and signs what you send so others can check it comes from you.

Which key type should I choose?

Curve25519 — Ed25519 for signatures, X25519 for encryption — is fast, compact and secure; every current PGP software reads it. Choose RSA 4096 only if someone you write to uses software too old for elliptic curves.

Where are my keys stored?

Nowhere. They are created by OpenPGP.js running in your browser, and disappear when you close the tab. Download your private key and your revocation certificate before leaving, and keep them apart: nobody can recover them for you.

Is encrypting with a password safe?

It uses the same standard, and is as strong as the password: anyone who has it can read the message. Make it long, and share it another way than the message itself — in person, by phone, or in another app.