PGP Encryption

What is PGP?

Pretty Good Privacy (PGP) provides end-to-end encryption for email. Only the intended recipient can decrypt the message. MonoMail also supports cryptographic signing to verify the sender's identity.

Key management

Access from Settings → PGP Keys. You can:

Encrypting outgoing email

  1. Import or generate a PGP key pair.
  2. Import the recipient's public key (or generate one for them if you control both ends).
  3. In the compose screen, tap the lock icon (encrypt) in the toolbar.
  4. When you send, the body is encrypted for all recipients using their stored public keys.
  5. Optionally, tap the pen icon (sign) to also sign the message cryptographically.

Receiving encrypted email

  1. Incoming PGP/MIME and inline PGP messages are detected automatically.
  2. If you have the corresponding private key, the email is decrypted transparently.
  3. A green lock badge appears below the body if decryption succeeded.
  4. A signature badge shows whether the signature is valid and who signed it.
  5. If decryption fails (missing key, wrong passphrase), a "PGP Encrypted" placeholder is shown.

Key storage

DataStorage
Private keysASCII-armored files, encrypted via Android KeyStore AES-GCM
Public keysPlain ASCII-armored files
PassphrasesEncrypted blobs on disk
MetadataEncryptedSharedPreferences (fingerprint, algorithm, creation date)

Exporting a public key

  1. Go to Settings → PGP Keys.
  2. Find the key and tap Export.
  3. The armored key is shown in a dialog with a Copy button.
  4. Share the copied key with your contact.
← Multi-Account Notifications →