VGP — Private Messages

Modern encrypted messages with file and image send. Crypto runs on this device — keys never leave your phone or browser. Inspired by classic PGP ideas.

£3.99 one-off lifetime unlock
  • Keygen, encrypt, decrypt
  • File & image attachments
  • Optional temp-link ciphertext upload
  • Works offline after unlock (crypto is local)

On Google Play, unlock uses Play Billing (product vgp_lifetime). For local / Internal testing: tap Demo unlock or open with ?license=DEMO.

VGP is an independent product. PGP is a trademark of its respective owners. VGP is not affiliated with or endorsed by them.

VGP toolkit

Generate keys, encrypt, and decrypt on this device. Same key/message files as the CLI.

Crypto runs locally · keys never leave this machine

How to use

Use this page like a notepad for VGP: make keys, lock a message for someone, unlock a message meant for you. Crypto runs in your browser. Optional temp-link attachments upload only opaque ciphertext (never plaintext).

Share vs keep secret

  1. .pub.vgp — safe to share (so others can encrypt to you / verify your signature).
  2. .sec.vgp — never share. Unlock it only with your passphrase.
  3. Armored messages look like BEGIN VGP MESSAGE blocks — paste them into email or chat.

Keygen

  1. Enter a name and a strong passphrase (email is optional, like classic PGP). You’ll need the passphrase every time you decrypt or sign.
  2. Generate, then download both key files. Store the secret key somewhere safe.
  3. First unlock can take a few seconds — don’t close the tab while it’s working.

Encrypt

  1. Load the recipient’s .pub.vgp.
  2. Type or load the plaintext message.
  3. Optional: add one or more file attachments (e.g. images or audio). By default they stay inside the same encrypted message — nothing is uploaded.
  4. Optional: check Send attachments via temp link to upload each file as opaque ciphertext (deleted after first download or within 3 days; max 100 MB each). Only recipients who decrypt the message can fetch and unlock those blobs.
  5. Optional: sign with your .sec.vgp so they can confirm it was you.
  6. Copy or download the armored output and send it.

Decrypt

  1. Paste the armored message (or upload the file).
  2. Unlock with your .sec.vgp + passphrase.
  3. Optional: load the sender’s .pub.vgp to check the signature.
  4. If the message includes attachments, download them individually or all at once. Remote temp attachments are fetched automatically (the server copy is burned on download). A 404 means it was already downloaded or expired.

With the CLI

Keys and messages from this page work with the licensed vgp command-line tool (and the other way around). Prefer the CLI for files and scripts; use this page for quick paste workflows.

Passphrases and private keys never leave this device. If you forget the passphrase, that secret key cannot be recovered.

Key generator

Creates .pub.vgp (share) and .sec.vgp (keep secret).

Key wrapping can take a few seconds after you click Generate.

Encrypt

Optional. By default files are packed into the encrypted message locally.

When checked, each attachment is encrypted on this device then uploaded as opaque ciphertext (max 100 MB each). The recipient’s message holds the unlock key. Server copies are deleted on first download or within 3 days — availability is not guaranteed. Local packing still works if the temp Worker isn’t ready.

Decrypt