MacPGP is a native macOS OpenPGP app for managing keys, encrypting files and messages, signing content, and working with encrypted files directly from Finder.
MacPGP is distributed as a Developer ID signed, notarized, and stapled DMG through GitHub Releases.
- Download MacPGP-1.0.1.dmg from the MacPGP 1.0.1 release.
- Open the DMG and copy
MacPGP.appto/Applications. - Launch MacPGP. If macOS asks for confirmation, approve the Developer ID signed app.
Release asset checksum:
SHA-256 MacPGP-1.0.1.dmg
94158d1997ae5c817c018119440f309332c7de153204e5083faa0ad014fdf400
Requirements and release notes:
- Requires an Apple Silicon Mac (
arm64) running macOS Tahoe 26.2 or later. The vendored OpenPGP bridge isarm64-only; Intel Macs andx86_64builds are not supported. - Build-host and CI architecture requirements for contributors are documented in DEVELOPMENT.md.
- Release notes are available on the GitHub Releases page. Project history is also tracked in CHANGELOG.md.
- Generate RSA keys in 2048, 3072, or 4096 bits
- Import, export, and delete OpenPGP public and private keys
- Encrypt messages and files for one or more recipients
- Encrypt files directly from the macOS share sheet
- Decrypt supported OpenPGP messages and files
- Sign messages and files
- Verify signatures when the relevant public key is available
- Work with ASCII-armored keys, messages, and signatures
- Store passphrases in macOS Keychain for supported workflows
- Preserve in-progress workflow state as you move through the app
MacPGP integrates with Finder through three Finder extensions:
- FinderSyncExtension
- Registers mounted, non-hidden volumes with FinderSync; files outside registered FinderSync locations do not receive badges or FinderSync context-menu actions
- Shows a lock badge on supported OpenPGP-encrypted files (
.gpg,.pgp,.asc) in those registered locations - Adds Finder context menu actions in those registered locations:
- Encrypt with MacPGP for non-encrypted files
- Decrypt with MacPGP for encrypted files
- QuickLookExtension
- Press Space on a supported encrypted file to see encryption metadata (algorithm, recipients, file info)
- Metadata-only: Quick Look does not decrypt in-preview. Open the file in MacPGP to decrypt and read its contents.
- ThumbnailExtension
- Provides custom thumbnails for supported encrypted files (with visual differences for binary vs ASCII-armored files)
After first launch, enable (or disable) the shipping extensions in:
System Settings → Privacy & Security → Extensions → Finder Extensions / Quick Look / Thumbnails
If Finder doesn’t immediately pick up changes, quit and relaunch Finder (or log out and back in).
MacPGP also ships a ShareExtension — the fourth shipping extension alongside the three Finder extensions above. It adds MacPGP to the macOS share sheet so you can encrypt files without opening the main app:
- From any app that offers Share, choose MacPGP
- Select one or more synced recipient keys
- MacPGP returns encrypted
.gpgoutput
Enable or disable it in System Settings → Privacy & Security → Extensions → Sharing.
Development setup and build instructions are in DEVELOPMENT.md.
- Support page: MacPGP Support
- Privacy policy: MacPGP Privacy Policy
| Action | Shortcut |
|---|---|
| Generate New Key | ⌘N |
| Import Key | ⌘I |
Apache License 2.0 - see LICENSE for details. Third-party notices for the vendored OpenPGP bridge are in THIRD_PARTY_NOTICES.md.
MacPGP public support and privacy information is available on the GitHub Pages site:
- Website: MacPGP Website
- Privacy Policy: MacPGP Privacy Policy