OpenKeychainOpenPGP encryption and key management for Android.GPL-3.0
OpenPGP encryption and key management for Android.
OpenKeychain manages OpenPGP keys and encrypted messages on Android. Users can store their own keys and contacts’ keys, find keys online, exchange them, and encrypt, decrypt or digitally sign messages. It integrates with applications such as K-9 Mail, and can import or export keys from storage and scan QR codes to add other people’s keys.
OpenKeychain README / OpenKeychain official overview · Reviewed 2026-11-03
- 01 / Feature noteKey exchange
Find keys online, exchange them, or scan QR codes to add another person’s key.
Feature source ↗ - 02 / Feature noteMessage encryption
Use OpenPGP keys to encrypt, decrypt and digitally sign messages, including through compatible Android apps.
Feature source ↗
GitHub stars
2,632
Detected license
GPL-3.0
Repository created
2012-03-09
Repository push
2024-05-16
2012-03-09Repository push
2024-05-16
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-16T00:57:19.371756+00:00 · Last successful fetch 2026-10-16T00:57:19.371756+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
2.8/10
Scanned 2026-10-19 · 12 scored / 14 returned
i
- Code-Review · 1/10
Found 4/25 approved changesets -- score normalized to 1
- Maintained · 0/10
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
- Token-Permissions · 0/10
detected GitHub workflow tokens with excessive permissions
- Dangerous-Workflow · 10/10
no dangerous workflow patterns detected
- CII-Best-Practices · 0/10
no effort to earn an OpenSSF best practices badge detected
- Pinned-Dependencies · 0/10
dependency not pinned by hash detected -- score normalized to 0
- Security-Policy · 0/10
security policy file not detected
- Packaging · Inconclusive
packaging workflow not detected
- License · 10/10
license file detected
- Fuzzing · 0/10
project is not fuzzed
- Signed-Releases · Inconclusive
no releases found
- Binary-Artifacts · 9/10
binaries present in source code
- Branch-Protection · 0/10
branch protection not enabled on development/release branches
- SAST · 0/10
SAST tool is not run on all commits -- score normalized to 0
Repository commit 8d0bd1f8537f · Scorecard v5.6.0
Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source
GitHub release
Unknown
i
No result returned.
Checked 2026-11-04T04:04:05Z · Latest attempt: not found · Provider source
Unknown
