GPG VaultSecure cryptography workspace
Secure workspace

Firestore GPG Vault

Authenticate, manage multiple OpenPGP identities, and encrypt or sign messages directly in the browser with your synced key book.

Working locally-first

Everything you create stays on this device by default. Open the Accounts menu in the top-right corner whenever you want to "Sign in to Cloud Backup" and sync with Firebase.

Local-only

Workspace stored on this device. Sign in to enable cloud backups.

Active label

Add a secret key to start selecting labels.

Key book

Maintain multiple secret keys, switch the active identity, and provide passphrases right when you decrypt or sign.

0 keys

No secret keys yet. Import or generate a key to get started.

Import secret key

Add an existing private key to your vault and optionally mark it as the active identity.

Passphrases for imported keys are never stored. Provide them during decrypt or sign actions instead.

Generate new key pair

Create a fresh RSA key pair entirely in your browser. Your private key never leaves the device.

Remember this passphrase—you must enter it every time you decrypt or sign.

Offline zero-knowledge backup

Export an end-to-end encrypted snapshot of your vault or restore one without sharing secrets with any server.

Include in backup

Restore backup

Choose an armored backup file and provide the matching passphrase. The vault replaces matching entries and adds missing ones.

Contact quick pick

Search your synced contacts and load their public key for encryption. To add or edit contacts, use the Contacts tab.

0 contacts

No contacts yet. Visit the Contacts tab to add recipients before encrypting here.

Decrypt message

Paste an armored ciphertext and unlock it using your stored private key.

Sign message

Produce detached signatures using any stored private key.

Encrypt message

Select a contact and encrypt text with their public key instantly.