OpenPGP - Tor browser compatible Autor: Max

Encrypt, decrypt, sign & verify PGP messages entirely inside Firefox. Designed for Tor Browser and privacy-focused users — no files saved to disk, no external servers, no hidden code.

Many Tor users encounter PGP-protected logins or encrypted messages daily. Installing a desktop PGP application on a live USB or shared machine is often impractical or leaves traces behind. OpenPGP Extension solves this by keeping everything inside the browser: your keys live in Firefox's own encrypted storage, decrypted content never touches the filesystem, and operations happen locally using the widely-reviewed OpenPGP.js library.

Key features:

• Generate RSA key pairs inside the browser
• Encrypt messages to imported public keys
• Decrypt messages with your stored private key
• Sign messages (cleartext or detached)
• Verify Messages with signatures using public keys
• Import/export both private and public keys
• Master password support to protect stored keys at rest with AES-256 encryption (All keys, your own private keys and also your contacts imported public keys)
• Works on a portable Tor Browser USB stick — keys travel with the browser profile

Why it's safe to use with Tor:
The extension requests only storage and downloads permissions. No network calls are made at all. Storage permission is used for saving keys to local browser storage, and download permission is only used when you take a backup (ie, export all of your keys into a .json file. If master password is used it's encrypted and can be imported again on any other installation with ease)
All source code is unminified, unobfuscated and very much readable and easy to understand with plenty of comments. It does not phone home, in fact, it doesn't phone anywhere. No network requests are made. You can look at the source code over at my GitHub page: https://www.github.com/ernos/firegpg

Ideal for:
- Tor Browser on a live USB or portable drive
- Privacy-focused users who want PGP without installing GPG4Win, GPG4USB, or GnuPG
- Anyone who wants a clean, auditable PGP tool with no desktop footprint