Privacy is a
fundamental human right.

CypherAir brings OpenPGP encryption to iPhone, iPad, Mac, and Apple Vision Pro — fully offline. Encrypt, decrypt, sign, and verify, with no accounts, no servers, and no tracking.

Download on the App StoreSource on GitHub

Available now · iOS / iPadOS / macOS / visionOS 26.5+

No servers to subpoena.

No accounts to leak.

No data to sell.

What doesn't exist can't be taken.

The app

Everything on your device.
Nothing anywhere else.

CypherAir is a complete OpenPGP toolkit that never touches a network. It works in airplane mode — because nothing it does requires anyone's servers, or anyone's permission.

Fully offline

No network code, no analytics, no update checks. Every cryptographic operation happens on your device.

A real open standard

Built on OpenPGP, across three generations of the standard: Legacy keys work with GnuPG 2.1+, Modern keys speak RFC 9580, and Post-Quantum keys are built on RFC 9980. Even device-bound keys are standard P-256 — other OpenPGP tools encrypt to them and verify them; only the private key stays in hardware.

Gentle to learn

A guided tutorial runs in an isolated sandbox, so you can practice safely before touching real keys.

Secure Enclave custody1

Portable keys are wrapped by the Secure Enclave. New device-bound keys never leave it — non-exportable, impossible to back up — and unlock only with Face ID, Touch ID, or your passcode.

Messages and files

Encrypt text and files, with streaming performance for large files. Sign what you send; verify what you receive.

Backups you control

Export passphrase-protected key backups and revocation certificates — only when you choose to. Device-bound keys are non-exportable by design.

What's new

Meet CypherAir X.

Coming soon

The next major release. A full system of nine key families — Secure Enclave device-bound and post-quantum among them — in an app redesigned around one quiet idea: your words are the point, not the chrome around them.

Ready for the quantum era.

What gets recorded today shouldn’t become readable tomorrow. Four of CypherAir X’s new key families are built on RFC 9980 — the IETF’s new post-quantum OpenPGP standard. Every post-quantum key is a composite: a lattice-based algorithm braided with a proven classical one, so breaking your encryption means breaking both.

  • Any post-quantum recipient raises the message to AES-256, automatically.
  • Device-bound post-quantum keys split custody: the quantum-resistant half lives in the Secure Enclave, the classical half is sealed to your device — neither works alone.
  • The encrypt screen claims quantum-safe only when every recipient key is post-quantum — never for a mixed message.

Like the other RFC 9580-track families, post-quantum keys don’t interoperate with GnuPG — its post-quantum format is different.

Quiet by design.

CypherAir X takes its own color out of the picture. What remains is calm: your system accent, soft surfaces, and hierarchy drawn with typography and space.

  • Follows your system accent color — no paint of its own.
  • Hierarchy from typography and space, not decoration.
  • One design language on iPhone, iPad, Mac, and Vision Pro.

Built for the Mac.

Give it a wide window and the tools open into two panes — your work on the left, your result on the right.

  • Wide two-pane layouts: workflow left, output right.
  • Press ⌘1 through ⌘8 to jump to any section.
  • A Keys menu: New Key ⌘N, Import Key ⇧⌘N.
  • Right-click keys and contacts for quick actions.

Everywhere you are.

The same keys, contacts, and tools — sized for the device in your hand, on your desk, or in your space.

iPhone In your pocket.

iPad On your desk.

Apple Vision Pro In your space.

How it works

Four steps to a private conversation.

CypherAir handles the OpenPGP details. You keep a workflow anyone can follow.

1

Create your keys

Generate a modern key pair on your device, in seconds.

2

Exchange public keys

Share by QR code, file, or clipboard — and confirm fingerprints.

3

Encrypt & sign

Pick recipients, seal your message, and share it anywhere.

4

Decrypt & verify

Unlock locally, read the message, and see exactly who signed it.

Under the hood

The details, if you want them.

CypherAir's cryptographic core is built on Sequoia-PGP, the modern OpenPGP implementation written in Rust. Keys come in nine families — five strength tiers, each available as a portable key you can export and back up, and four of them also as device-bound keys the Secure Enclave never lets leave this device. Legacy keys (RFC 4880, v4) interoperate with GnuPG 2.1+; Modern keys (RFC 9580, v6) adopt the latest OpenPGP standard; Post-Quantum keys (RFC 9980) are built to resist future quantum computers.

Strength tier
PortableExportable · software custody
Device-BoundSecure Enclave · non-exportable
Legacyv4 · ~128-bit
PortableCurve25519
Device-BoundNIST P-256
Modernv6 · ~128-bit
PortableEd25519 · X25519
Device-BoundNIST P-256
Modern · Highv6 · ~224-bit
PortableEd448 · X448
Device-Bound—Ed448 can’t live in the Secure Enclave
Post-Quantumv6 · ~192-bitQuantum-resistant
PortableML-KEM-768 + X25519Recommended default
Device-BoundML-KEM-768 + X25519Split custody
Post-Quantum · Highv6 · ~256-bitQuantum-resistant
PortableML-KEM-1024 + X448
Device-BoundML-KEM-1024 + X448Split custody
Platforms
iOS 26.5+ / iPadOS 26.5+ / macOS 26.5+ / visionOS 26.5+
OpenPGP engine
Sequoia-PGP
Message format
SEIPDv1 (MDC) · SEIPDv2 AEAD OCB
Backup protection
Iterated+Salted S2K · Argon2id
Key protection
Secure Enclave wrapping & custody + Keychain
App data protection
ProtectedData + SQLCipher · device-bound root secret
Network
None — fully offline
Security

Keys that never leave the hardware.

Secure Enclave custody

Device-bound keys are generated inside the Secure Enclave and never leave it. Every private-key operation runs in dedicated hardware, unlocked by Face ID, Touch ID, or your passcode.

Hardened memory

The app ships with Apple's Enhanced Security protections enabled, including hardware memory tagging on supported devices.

Nothing lingers

Passphrases, plaintext, and key material are wiped from memory the moment they're no longer needed.

Your words, yours alone.

Download CypherAir and start communicating privately today.

Download on the App StoreCypherAir X — coming soonSource on GitHub
Notes

  1. Secure Enclave custody is finished. You can use it today by building CypherAir from source on GitHub. Because of a problem with our Apple Developer account, the App Store release of the next version may be delayed; until then, the App Store edition does not include device-bound keys. ↩

  2. Back up your data before updating. This version removes some older compatibility and migration code. If you're on an older release, update to version 1.4.1 — the current App Store version — first, then move to the new version.