AgePony

Modern file encryption and signing for iPhone, built on the age protocol. AgePony makes it simple to encrypt anything to anyone, and to sign files so others can verify they came from you. No accounts, no servers, no key management headaches.
ENCRYPT TO ANYONE

Anyone's GitHub username — AgePony fetches their published SSH keys
Any age public key (X25519)
Any SSH public key (ed25519 or RSA)
A passphrase, when you don't need recipient keys at all

SIGN FILES

New in 2.0. Produce a detached signature that proves a file came from you and hasn't been altered. Anyone can verify it, no AgePony required.

Sign with an in-app SSH key (ed25519 or RSA)
Sign with a Secure Enclave key, generated in hardware and never exportable
Sign with an external security key over NFC: tap a YubiKey or Token2, including keys protected by a FIDO PIN
Signatures are standard SSHSIG, the same format as ssh-keygen -Y sign, verifiable on any machine with OpenSSH
Verify signatures from other people right inside the app

BUILT ON AGE

AgePony is a clean-room implementation of the age v1 file format — the modern alternative to PGP that's quietly become a standard across the developer security community. X25519 elliptic-curve key agreement, ChaCha20-Poly1305 authenticated encryption, scrypt for passphrase-protected files. Bit-perfect compatibility with the reference age CLI: encrypt on your phone, decrypt on your laptop, and vice versa.
ENCRYPTED NOTES

Per-note passphrase-locked notes for the secrets that never need to leave your device — recovery phrases, API keys, server credentials, dead-drop messages to yourself. Each note has its own passphrase, stretched through scrypt before becoming the wrapping key. Forget the passphrase and the body is permanently inaccessible. That's the point.
EVERY KIND OF DATA

Files: encrypt anything from the Files app
Bundles: pick several files at once and AgePony packs them into one .age
Text: armored age blocks for paste-into-email use
Photos: import via the Files picker into the Files tab
.age files: tap "Open in AgePony" from the Files app for direct decryption

LOCAL-FIRST, ZERO BACKEND

No account creation. No cloud sync. No telemetry. No analytics. No advertising. No third-party SDKs. Every byte of your vault stays on your device, encrypted at rest with a master key in iOS Keychain that's unlocked by Face ID or Touch ID. The only network request AgePony makes is fetching a GitHub user's public keys — and only when you explicitly ask for it.
BUILT FOR THE DEVELOPER SECURITY COMMUNITY

Simple enough for anyone. If you've ever wished PGP were simpler, age is the answer, and AgePony is age on your phone. If you've ever wanted to send a developer a quick encrypted file without coordinating keys ahead of time, GitHub usernames make that possible in one tap. The interface is opinionated and minimal: a tab for files, a tab for notes, a tab for text, a tab for your identities, a tab for settings. That's the whole app.
OPEN SOURCE

AgePony is open source under the Apache 2.0 license. Read every line at github.com/norsehorse-dev/AgePonyiOS.
COMPATIBILITY

Works with any age v1 implementation (FiloSottile/age in Go, str4d/rage in Rust, and more)
All standard age recipients (X25519)
SSH-ed25519 and SSH-RSA public keys
Reads and writes both binary and PEM-armored age files
Detached signatures use SSHSIG, verifiable with OpenSSH ssh-keygen -Y verify
Signs with SSH, Secure Enclave, or FIDO security keys (sk-ssh-ed25519 and sk-ecdsa-sha2-nistp256)
Requires iPhone with iOS 18 or later
Optimized for iPhone

PRIVACY

AgePony collects nothing. There is no server. Your data never leaves your device unless you explicitly export it. Full policy at agepony.com/privacy.
SUPPORT

Documentation, FAQ, and contact: agepony.com/support

Email: NorseHorse@norsehor.se
Built quietly in Alabama by NorseHorse. Sibling to PGPony, which does the same kind of thing for OpenPGP keys.