GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories. GnuPG, also known as GPG, is a command line tool with features for easy integration with other applications. A wealth of frontend applications and libraries are available. GnuPG also provides support for S/MIME and Secure Shell (ssh).

Since its introduction in 1997, GnuPG is Free Software (meaning that it respects your freedom). It can be freely used, modified and distributed under the terms of the GNU General Public License .

The current version of GnuPG is 2.2.31. See the download page for other maintained versions.

Gpg4win is a Windows version of GnuPG featuring a context menu tool, a crypto manager, and an Outlook plugin to send and receive standard PGP/MIME mails. The current version of Gpg4win is 3.1.16.

Arguing that you don't care about the right to privacy because you have nothing to hide is no different from saying you don't care about free speech because you have nothing to say. – Edward Snowden

Using encryption helps to protect your privacy and the privacy of the people you communicate with. Encryption makes life difficult for bulk surveillance systems. GnuPG is one of the tools that Snowden used to uncover the secrets of the NSA.

Please visit the Email Self-Defense site to learn how and why you should use GnuPG for your electronic communication.

The latest blog entries:

• Using a TPM with GnuPG 2.3
• GnuPG and LDAP
• Using an OpenPGP card in the UbuntuPhone BQ E4.5

The latest release news:
(all news)

We have done another release in the GnuPG 2.3 series. {more}

We have done the second release in the GnuPG 2.3 series. {more}

A new Libgcrypt version is available. {more}

We are pleased to announce the availability of a new GnuPG release: version 2.3.0. This release marks the start of public testing releases eventually leading to a new stable version 2.4.

See the full announcement

This version fixes a few build problems in 1.9.1. See https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000457.html

Unfortunately we introduced a severe bug in Libgcrypt 1.9.0 released 10 days ago. If you already started to use version 1.9.0 please update immediately to 1.9.1.

Although we will keep on maintaining the 1.8 branch, the new stable branch is now 1.9. Version 1.9.0 comes with a lot of performance improvements and a few other new features. It provides full API and ABI compatibility to previous versions. {more}

GnuPG version 2.2.27 has been released today. This is a maintenance release with a few minor bug fixes. {more}

GnuPG version 2.2.26 has been released today. This is a maintenance release with improved support for LDAP keyservers and Active Directory. {more}

GnuPG version 2.2.25 fixes a small regression in 2.2.24. {more}

GnuPG version 2.2.24 has been released today. This is a maintenance release fixing some longstanding bugs. {more}

GnuPG version 2.2.23 has been released today. This version fixes a critical security bug in 2.2.21 and 2.2.22 (CVE-2020-25125).

Please follow the instructions from the announcement mail and update affected installations. See also our bug entry #5050.

[Note: Do not use this release - use 2.2.23 instead.]

GnuPG version 2.2.22 has been released today. This is a maintenance release with a some minor changes. {more}

[Note: Do not use this release - use 2.2.23 instead.]

After the release of GnuPG 2.2.20 back in March it is now the time to get collected fixes from the last months out: GnuPG version 2.2.21 has been released today. This is a maintenance release with a some minor changes. {more}

Nearly a year passed since the last release and so the time is ripe for new maintenance release: Libgcrypt version 1.8.6 is now available. {more}

After about a year of tweaking details of the approval, Gpg4win and GnuPG are now approved for EU RESTRICTED communication (VS-NfD). This approvals covers the protocols S/MIME and OpenPGP (public-key and symmetric-only) with hard- and soft-tokens. Our commercial branch GnuPG.com released a press notice (in German) today.

We are pleased to announce the availability of GnuPG version 2.2.19. This version fixes a regression introduced with the last release. {more}

We are pleased to announce the availability of GnuPG version 2.2.18. This is maintenance release to fix a couple of minor bugs and provide a few feature updates. This release also retires the use of SHA-1 key signatures created since this year. {more} (see also)

If you care about local site-channel attacks on ECDSA you may want to update to Libgcrypt version 1.8.5. CVE-CVE-2019-13627 {more}