direct download

PGPKit for Android, without Google Play

For phones that have no Google Play, including most phones sold in mainland China. It is the same app as on Google Play, with PGPKit Pro included at no charge, because there is no store to buy it from. It never contacts a store.

If your phone has Google Play, install from Google Play instead, so it updates automatically.

此版本适用于没有 Google Play 的安卓手机，已免费包含 PGPKit Pro。此版本適用於沒有 Google Play 的 Android 手機，已免費包含 PGPKit Pro。

Version 1.0.1 · Android 7.0 or later · 80 MB

Check the download before installing

An APK can be altered by whoever hands it to you. Before installing, make sure the file is the one published here. Its SHA-256 checksum must be exactly:

44cf3cdcd7ba8c4d76fd6bdb06e53291f131c06918516cfc36e554fde4536997

shasum -a 256 PGPKit-1.0.1.apk          # macOS, Linux
certutil -hashfile PGPKit-1.0.1.apk SHA256   # Windows

Every version is signed by the same certificate, belonging to Can You Grab It LLC. Its SHA-256 fingerprint is:

e7902da8c8dcc29881dadb3af2150fd920c4219115fa5eef86c57f77f6c6c3f6

apksigner verify --print-certs PGPKit-1.0.1.apk

Android itself refuses to install an update signed by a different certificate. So once PGPKit is installed, a tampered “update” cannot replace it.

Installing

Open the downloaded file. Android will ask you to allow your browser or file manager to install apps. Allow it for this install, then you can turn it off again.

Things to know

• Updates are manual. Check this page for new versions. Installing a newer APK over the old one keeps your keys.
• This version and the Google Play version cannot replace each other. They are signed by different keys. To switch, back up your keys (Keys → your key → Back up), uninstall, install the other one, and restore.
• Keys, privacy and everything else work exactly as described in the privacy policy.