CarrierPony: PGP Chat & Files

CarrierPony is a private messenger built on OpenPGP, the encryption standard trusted for decades. Every message and every file is PGP encrypted end to end and cryptographically signed, so only the person you send to can read it, and they can prove it came from you.

REAL PGP, MADE SIMPLE
Most secure messengers ask you to trust their protocol. CarrierPony uses OpenPGP with modern Curve25519 keys, the same standard behind GnuPG. Your identity is a real PGP key pair, generated on your device in one tap. Power users can import an existing OpenPGP private key and use it as their identity, so your established PGP identity works here too. No PGP knowledge is required to use the app: pairing, encryption, signing, and verification all happen automatically.

NO ACCOUNTS, NOTHING TO LEAK
There is no sign-up. No phone number, no email address, no username. Your identity is your key, and it never leaves your device except in encrypted backups you create yourself, protected by a passphrase only you know.

THE RELAY KNOWS NOTHING
Messages travel as sealed envelopes through a relay that cannot read them. No names, no message contents, no plaintext, ever. Envelopes are deleted when picked up and expire automatically if they are not.

PAIR AND VERIFY
Pair in person with a single QR scan, or remotely with an invite link over any channel you trust. A safety number lets you verify your contact so you know nobody is in the middle.

FEATURES
- End to end PGP encrypted text messaging
- Encrypted file and photo transfer
- One scan in-person pairing, invite links for remote pairing
- Safety numbers for contact verification
- Bring your own key: import an OpenPGP secret key as your identity
- Encrypted identity backup and restore with a passphrase
- App lock with fingerprint or face unlock
- Read receipts and multi-device sync, end to end encrypted
- Disappearing messages: everything expires from the relay
- Available in 9 languages

WHAT CARRIERPONY NEVER DOES
- No ads, no analytics, no trackers
- No contact list upload
- No plaintext on any server

A note on notifications: delivery uses a contentless push that wakes the app to check the relay. If alerts seem delayed, exclude CarrierPony from battery optimization in system settings.

CarrierPony is part of the Pony family of privacy apps, alongside PGPony, AgePony, QuorumPony, and RelayPony.