AgePony

Modern file encryption and signing for iPhone, built on the age protocol. AgePony makes it simple to encrypt anything to anyone, and to sign files so others can verify they came from you. No accounts, no servers, no key management headaches. ENCRYPT TO ANYONE Anyone's GitHub username — AgePony fetches their published SSH keys Any age public key (X25519) Any SSH public key (ed25519 or RSA) A passphrase, when you don't need recipient keys at all SIGN FILES New in 2.0. Produce a detached signature that proves a file came from you and hasn't been altered. Anyone can verify it, no AgePony required. Sign with an in-app SSH key (ed25519 or RSA) Sign with a Secure Enclave key, generated in hardware and never exportable Sign with an external security key over NFC: tap a YubiKey or Token2, including keys protected by a FIDO PIN Signatures are standard SSHSIG, the same format as ssh-keygen -Y sign, verifiable on any machine with OpenSSH Verify signatures from other people right inside the app BUILT ON AGE AgePony is a clean-room implementation of the age v1 file format — the modern alternative to PGP that's quietly become a standard across the developer security community. X25519 elliptic-curve key agreement, ChaCha20-Poly1305 authenticated encryption, scrypt for passphrase-protected files. Bit-perfect compatibility with the reference age CLI: encrypt on your phone, decrypt on your laptop, and vice versa. ENCRYPTED NOTES Per-note passphrase-locked notes for the secrets that never need to leave your device — recovery phrases, API keys, server credentials, dead-drop messages to yourself. Each note has its own passphrase, stretched through scrypt before becoming the wrapping key. Forget the passphrase and the body is permanently inaccessible. That's the point. EVERY KIND OF DATA Files: encrypt anything from the Files app Bundles: pick several files at once and AgePony packs them into one .age Text: armored age blocks for paste-into-email use Photos: import via the Files picker into the Files tab .age files: tap "Open in AgePony" from the Files app for direct decryption LOCAL-FIRST, ZERO BACKEND No account creation. No cloud sync. No telemetry. No analytics. No advertising. No third-party SDKs. Every byte of your vault stays on your device, encrypted at rest with a master key in iOS Keychain that's unlocked by Face ID or Touch ID. The only network request AgePony makes is fetching a GitHub user's public keys — and only when you explicitly ask for it. BUILT FOR THE DEVELOPER SECURITY COMMUNITY Simple enough for anyone. If you've ever wished PGP were simpler, age is the answer, and AgePony is age on your phone. If you've ever wanted to send a developer a quick encrypted file without coordinating keys ahead of time, GitHub usernames make that possible in one tap. The interface is opinionated and minimal: a tab for files, a tab for notes, a tab for text, a tab for your identities, a tab for settings. That's the whole app. OPEN SOURCE AgePony is open source under the Apache 2.0 license. Read every line at github.com/norsehorse-dev/AgePonyiOS. COMPATIBILITY Works with any age v1 implementation (FiloSottile/age in Go, str4d/rage in Rust, and more) All standard age recipients (X25519) SSH-ed25519 and SSH-RSA public keys Reads and writes both binary and PEM-armored age files Detached signatures use SSHSIG, verifiable with OpenSSH ssh-keygen -Y verify Signs with SSH, Secure Enclave, or FIDO security keys (sk-ssh-ed25519 and sk-ecdsa-sha2-nistp256) Requires iPhone with iOS 18 or later Optimized for iPhone PRIVACY AgePony collects nothing. There is no server. Your data never leaves your device unless you explicitly export it. Full policy at agepony.com/privacy. SUPPORT Documentation, FAQ, and contact: agepony.com/support Email: NorseHorse@norsehor.se Built quietly in Alabama by NorseHorse. Sibling to PGPony, which does the same kind of thing for OpenPGP keys.