Messages that travel sealed.
CarrierPony is private messaging and file transfer for iPhone and Android. Every message is encrypted end to end and signed on your device — only you and the person you paired with hold the keys. The relay in between carries envelopes it cannot open.
Encrypted on your phone. Opened only on theirs.
Free on both stores.
No account to make, nothing to configure. Install it, generate your keys, pair with someone, and talk.
CarrierPony is free for iPhone. Download it on the App Store.
CarrierPony is free for Android. Get it on Google Play.
iPhone and Android talk to each other — same protocol, same safety numbers, same relay that cannot read a thing.
Three steps to a private thread.
No sign-up forms, no verification texts, no address book upload. Just keys, held by the two people who matter.
Create your identity
An OpenPGP keypair — Ed25519 for signing, Curve25519 for encryption — is generated on your device in a moment. No personal details are asked for or collected. Back it up to an encrypted file whenever you like.
Pair with someone
Send them an invite over any channel you trust, or scan each other's codes in person. Pairing exchanges public keys — never the private ones.
Verify, then talk
Compare the safety number to be certain it's really them. From then on, everything you send is encrypted for them and signed by you — messages, photos, files up to 50 MB.
Built to keep the middle out of it.
Every message and file is encrypted on your device and signed by your key. Nobody in between can read it or tamper with it.
End to end encrypted
OpenPGP under the hood, with modern Ed25519 and Curve25519 keys. Messages and files are sealed before they leave your phone and opened only on your contact's.
Signed, every time
Every envelope carries the sender's signature. What arrives is exactly what was sent — tampering anywhere along the way is detected, not trusted.
Send real files
Photos, documents, anything up to 50 MB, encrypted the same way your messages are. A dedicated Files tab keeps every transfer in one place.
Pair, then verify
Swap an invite in person or over any channel you trust. Compare a safety number to be certain no one slipped into the middle.
Keys stay on your device
Your identity is generated on your phone and never leaves it, except in an encrypted backup only you can open. Lock the app behind Face ID.
Bring your own key
Already have an OpenPGP key from GnuPG or PGPony? Import it and keep your identity. Passphrase-protected keys stay protected.
No account, ever
No phone number, no email address, no username database. There is nothing to sign up for and nothing about you to leak.
Open at the core
The cryptography is PGPonyCore, published under Apache-2.0. The part that has to be right is not a secret.
Report and block
Unwanted contact gets one tap to block. Reporting is built in without breaking the encryption for everyone else.
The relay knows nothing.
Messages and files pass through a relay so they reach you even when your phone is off or out of reach. That relay only forwards sealed envelopes. No names, no message contents, no plaintext, ever. It holds an encrypted blob just long enough to deliver it, then lets it go. Read the full breakdown on the security page.
Common questions.
Is CarrierPony available yet?
Do I need an account, phone number, or email address?
What encryption does CarrierPony use?
What can the relay see?
How do I know I'm really talking to my contact?
Can I use my existing PGP key?
Can I send files?
Is it open source?
Ready when you are.
Private messaging and file transfer, without handing your conversations to anyone in the middle.