Pocket-PGP logo

Pocket-PGP

Kleopatra → Pocket-PGP

A step-by-step onboarding page for importing your existing OpenPGP keyring from desktop (Kleopatra / GnuPG) into Pocket-PGP.

Goal Export your keys as ASCII-armored .asc → save the file where your iPhone can access it (Files / iCloud Drive / OneDrive) → import via Keys → Import.

1) Export on desktop 2) Move to iPhone 3) Import in Pocket-PGP Encrypt + sign setup

Prefer the full handbook (security model, troubleshooting, key admin)? Open the full guide →

1) Export on desktop

You typically want two files:

Option A — Kleopatra (GUI)

In Kleopatra, export your certificates and make sure the output is ASCII armored (.asc).

  • Export public certificates → public-keys.asc
  • Export secret keys → private-keys.asc
Menu names can vary by Kleopatra version. Look for “Export…” and “Export Secret Keys…”, and ensure the output is ASCII armored.

Option B — Terminal (gpg) (copy/paste)

Works on macOS/Linux and Windows with GnuPG installed (including gpg4win).

Export public keys:

gpg --export --armor > public-keys.asc

Export secret keys (needed for decrypt/sign):

gpg --export-secret-keys --armor > private-keys.asc
Private keys are sensitive. Avoid email. Store private-keys.asc securely and delete it after import if you don’t need it as a backup.

2) Move the .asc file(s) to your iPhone

Pocket-PGP can import from the iOS file picker, so you can use whichever path is easiest:

Tip: Keep a backup copy of your .asc in a safe place. If you ever reset the vault, you can re-import in minutes.

3) Import in Pocket-PGP

  1. Open Keys in Pocket-PGP.
  2. Tap Import (this opens the iOS file picker).
  3. Select your .asc file(s) from Files / iCloud / OneDrive.
  4. Done — your keyring is now available for Encrypt/Decrypt/Sign.
Two import modes: The Main screen → Import button imports a pasted key block. The Keys → Import button imports from files.
Pocket-PGP Key Administration screen

Use Keys → Import to import key files from the iOS file picker.

Encrypt + sign setup

Pocket-PGP includes an Encrypt + sign action. Before using it, select which private key should be your signing key.

One-time setup

  1. Open Keys.
  2. Select your private key.
  3. Tap Edit.
  4. Set Category to Signing certificate.
  5. Tap Save.
If you imported a smartcard/YubiKey stub (no private key material), signing will fail. Import a real software secret key or generate a keypair inside Pocket-PGP.

Quick test

  1. Paste plaintext in the main input.
  2. Add yourself as recipient (or use Encrypt for me if available).
  3. Tap Encrypt + sign.
  4. Paste the output back and tap Decrypt to verify it round-trips.
Edit key – set Category to Signing certificate

Edit key: set Category to Signing certificate.

Next

Last updated: 2026-02-02