inro

Self-contained PGP for the desktop. Paste a message and it is verified, decrypted, or ready to send.

One text field. Paste something encrypted or signed and inro handles it on the spot; type a message and pick who it is for. The OpenPGP engine is built in, so there is nothing else to install.

Download

macOSIntel & Apple Silicon, signed & notarized Windows64-bit Linuxx86_64

Also on ARM: Windows arm64 · Linux arm64. On macOS, Homebrew works too:

brew install --cask crgimenes/tap/inro

inro borrows only the webview the OS already ships. macOS has it built in; Windows needs the Edge WebView2 runtime, present on any current Windows; Linux needs GTK with WebKitGTK (libwebkit2gtk-4.1, or libwebkitgtk-6.0 for GTK 4), one package install.

What it does

Generates a key pair on the spot: EdDSA/Curve25519, an expiry if you want one, a passphrase set in a confirm-twice window with an honest strength estimate.
Verifies a signed message the moment it is pasted, no click required.
Finds which of your keys opens an encrypted message by itself and decrypts it, asking for a passphrase only when one is actually needed.
Encrypts and signs outgoing text in one step; the result replaces your text, selected and ready to copy.
Certifies a friend's key with yours, the "I checked, this really belongs to them" statement of the web of trust.
Reads keys already exported from gpg, so switching over keeps your existing contacts and identity.

Your passphrase is never stored. A signature only reports as valid when the signer's key is in your keyring; that the key really belongs to who it claims is still on you.