The modern successor to classic PGP ideas. Encrypt files and messages with today's cryptography — local keys, no cloud, no excuses.
INTRO LAUNCH PRICE · £2.99 · one-time · yours forever
Default email is postcard-level privacy. Cloud sync reads everything. “End-to-end” often means someone else’s keys. If you care about confidentiality, you need local, verifiable crypto — not vibes.
SMTP in the clear, providers that index your life, and attachments that travel unprotected. Assume the wire is hostile.
Sharing a link ≠ encrypting a file. If their servers hold the plaintext, your threat model already lost.
Classic tools carried RSA, IDEA, and packet formats from another era. The ideas were right. The primitives needed an upgrade.
VGP is a focused CLI: generate identities, encrypt to a recipient’s public key, authenticate with signatures, verify fingerprints. Private by design — no keyservers, no telemetry, no account.
Separate long-term identity (signing) from encryption keys — the classic model, with modern curve crypto under the hood.
Only their private key opens it. Optional sender signature so they know it really came from you.
Sign releases, contracts, builds. Verify fingerprints like a pro. Armor that pastes cleanly into email.
Your private key stays locked on disk behind a strong passphrase. We never see it — and never ask for an account.
| What you get | In plain terms |
|---|---|
| Modern signatures | Fast, compact proof it was you — not legacy DSA/RSA habits |
| Modern key agreement | Encrypt to someone’s public key with today’s curve crypto |
| Tamper-evident payloads | If a message is altered in transit, decrypt fails closed |
| Hard passphrase wrap | Private keys stay locked on disk until you unlock them |
| Own format | Not OpenPGP / GnuPG — a clean private channel on purpose |
Same job — encrypt for someone, prove it was you — with primitives you’d pick in a new design. Not OpenPGP-compatible on purpose.
Need to talk to existing PGP/GnuPG users? Stick with OpenPGP. VGP is a fresh private channel. See About and the FAQ.
Install once. Generate keys. Encrypt forever. No account, no cloud dependency.
One command creates your identity (sign) and encryption keypair, passphrase-wrapped.
vgp keygen --name "You" \ --email you@example.com --out ./keys
Use their public key. Optionally sign so they can verify it was you.
vgp encrypt --to bob.pub.vgp \ --in secret.txt --out secret.vgp \ --sign you.sec.vgp
Only their private key unlocks it. Signature check confirms the sender.
vgp decrypt --key bob.sec.vgp \ --in secret.vgp --out secret.txt \ --verify you.pub.vgp
No subscription. No seats. No “pro tier” upsell. Buy once, download, encrypt.
Intro launch price · one-time personal license · version 0.1.0+
vgp CLI (macOS / Linux / Windows via Python)Checkout uses Stripe Payment Link (configure in CONFIG.js).
Already purchased? Open download page
Same job — encrypt for someone, prove it was you, keep keys local — with modern cryptography and a simpler private format. It is intentionally not OpenPGP/GnuPG compatible. Local files only in v0.1 (no keyservers or web-of-trust). See What VGP changes.
No. VGP is an independent product. PGP is a trademark of its respective owners. VGP is not affiliated with or endorsed by Phil Zimmermann, Network Associates, Symantec, or any official PGP® product. We share the spirit of private communication — not the codebase or brand.
No. VGP uses its own message format and modern cryptography. It does not speak OpenPGP packets. Interop with GnuPG is intentionally out of scope — use OpenPGP when you need that world.
On your machine, in files you control (.pub.vgp to share, .sec.vgp to keep secret). Private keys stay passphrase-locked on disk. We never receive your keys or passphrase.
A personal license to use VGP, plus downloadable source zip, Python wheel, and install.sh. After purchase you’ll land on the download page (or use a license code). For demos, ?license=DEMO unlocks the same artifacts.
The £2.99 intro launch price is a personal license. For team / commercial licensing, contact the operator of https://vgprivacy.com. The underlying MIT-licensed source remains MIT for the open package — the paid license funds the product and branded distribution.
Version 0.1.0 is a clean-room design using well-known libraries (cryptography, argon2-cffi). Treat early versions as research-grade for high-stakes threat models until you complete your own review or a third-party audit.