GPG agent

Use GPG keys from desktop tools and compatible Android apps without exporting private keys.

Keyguard can act as a GPG agent, and on Android as an OpenKeychain-compatible provider. When a tool asks for a signature or a decryption, Keyguard performs it with the matching key from your vault and returns the result. The private key is never handed over.

When a request comes in, an approval dialog shows you which application wants to use which key, and you decide how long that approval lasts. The generator can create new Ed25519 or RSA key pairs, and public keys can be fetched from a keyserver. When you’re ready to wire it up, the setup guide covers it.