What is PGP Encryption?

PGP (Pretty Good Privacy) was created by Phil Zimmermann in 1991 and remains the most widely used standard for encrypted email and file security. The open standard version is called OpenPGP (RFC 4880), and the most common free implementation is GnuPG (GPG). Today, online tools make it accessible without any installation.

PGP uses a hybrid encryption system — combining asymmetric encryption (RSA or ECC) with symmetric encryption (AES) — to give you the best of both worlds: secure key exchange and fast data encryption.

How PGP Encryption Works

Step-by-Step: Use PGP Encryption Online

The easiest way to get started is with our free PGP encryption online tool at jsonformatterxml.com — it handles key generation, encryption, decryption, and signing entirely in your browser. Nothing is sent to any server.

PGP via Command Line (GPG)

For advanced users who prefer the command line, GPG offers the full feature set:

    
Terminal — GPGCopy
    # Install GPG (macOS)
brew install gnupg

# Install GPG (Linux)
sudo apt install gnupg

────────────────────────────────────────

# Generate a new key pair
gpg --full-generate-key
# Choose: RSA 4096 or ECC (ed25519)
# Set expiry date and passphrase

# List your keys
gpg --list-keys

# Export your public key to share
gpg --armor --export your@email.com > my_public_key.asc

# Import someone's public key
gpg --import their_public_key.asc

────────────────────────────────────────

# Encrypt a file for a recipient
gpg --encrypt --armor \
    --recipient recipient@email.com \
    --output message.asc \
    message.txt

# Encrypt AND sign
gpg --encrypt --sign --armor \
    --recipient recipient@email.com \
    --output message.asc \
    message.txt

# Decrypt a received message
gpg --decrypt message.asc

────────────────────────────────────────

# Sign a file (without encrypting)
gpg --armor --detach-sign document.pdf

# Verify a signature
gpg --verify document.pdf.asc document.pdf
  

PGP in Code — OpenPGP.js

    
JavaScript — openpgp.jsCopy
    import * as openpgp from 'openpgp';

// Generate key pair — same library used by browser-based tools
const { privateKey, publicKey } = await openpgp.generateKey({
  type: 'ecc',
  curve: 'curve25519',
  userIDs: [{ name: 'Bilal', email: 'bilal@example.com' }],
  passphrase: 'my-passphrase'
});

// Encrypt a message
const encrypted = await openpgp.encrypt({
  message: await openpgp.createMessage({ text: 'Secret message!' }),
  encryptionKeys: await openpgp.readKey({ armoredKey: publicKey }),
});
// → "-----BEGIN PGP MESSAGE-----\n..."

// Decrypt a message
const message = await openpgp.readMessage({ armoredMessage: encrypted });
const { data: decrypted } = await openpgp.decrypt({
  message: message,
  decryptionKeys: await openpgp.decryptKey({
    privateKey: await openpgp.readPrivateKey({ armoredKey: privateKey }),
    passphrase: 'my-passphrase'
  })
});
console.log(decrypted); // "Secret message!"
  

PGP vs S/MIME vs Signal

Frequently Asked Questions