# AgePony: File Encryption — Post-quantum encrypt & sign

> Post-quantum file encryption and signing for mobile devices. (iPhone/iPad app by Kevin Stewart.)

- Source: https://appshunter.io/ios/app/agepony-file-encryption/id6774821172 (this page in markdown: same URL + `.md`)
- Developer: [Kevin Stewart](https://appshunter.io/developer/1840294398)
- Category: Utilities, Productivity
- Price: Free
- Rating: 4.50/5 from 2 App Store ratings
- Age rating: 4+
- Requires: iOS 18.6 · 3 MB
- Languages: American English
- Released: 2026-06-02
- Data updated: 2026-08-27
- Monetization: free
- User reviews in markdown: https://appshunter.io/ios/app/agepony-file-encryption/id6774821172/reviews.md

## What is AgePony?

Modern file encryption and signing for iPhone, built on the age protocol. Encrypt anything to anyone, sign files so others can verify they came from you, and keep every byte on your device. No accounts, no servers, no key-management headaches.

POST-QUANTUM
Hybrid ML-KEM-768 + X25519 recipients, so a file captured today stays private even if X25519 falls to a quantum computer years from now. Interoperable with the age CLI 1.3 and newer. Files already on a classical key? The re-encrypt tool moves them across.

ANY SIZE
Encrypt, decrypt, sign and verify files of any size. Nothing is held in memory, so a 1 GB video behaves like a text file.

ENCRYPT TO ANYONE

A GitHub username. AgePony fetches their published SSH keys
Any age public key, classical (X25519) or post-quantum
A YubiKey, through age-plugin-yubikey recipients (age1yubikey1...)
Any SSH public key (ed25519 or RSA)
A passphrase, when you don't need recipient keys at all
Exchange keys in person without typing: show yours as a QR code, or scan theirs.

SIGN FILES
Prove a file came from you and hasn't been altered. Sign on its own for a detached signature anyone can check without AgePony, or sign and encrypt in one step so the signature is sealed inside the ciphertext. Signatures verify automatically as a file decrypts.

An in-app SSH key (ed25519 or RSA)
A Secure Enclave key, generated in hardware and never exportable
An external security key over NFC: tap a YubiKey or Token2, including keys behind a FIDO PIN
Standard SSHSIG (ssh-keygen -Y sign), verifiable anywhere OpenSSH runs

BUILT ON AGE
A clean-room implementation of the age v1 format, the modern alternative to PGP: X25519 key agreement, ChaCha20-Poly1305, scrypt for passphrases. Bit-perfect with the reference age CLI. Encrypt on your phone, decrypt on your laptop, and back again.

ENCRYPTED NOTES
Passphrase-locked notes for secrets that never leave your device: recovery phrases, API keys, credentials. Each note has its own passphrase, stretched through scrypt. Forget it and the body is gone for good. That is the point.

LOCK IT DOWN
Unlock with Face ID or Touch ID, or set an app password or PIN, with or without biometrics. Choose how long AgePony waits before it locks. An optional duress password looks exactly like a normal unlock but silently wipes the vault, for the moment you are made to open the app. Delete an identity by mistake and Recently Deleted holds it for 30 days.

EVERY KIND OF DATA

Files: encrypt anything from the Files app
Several at once: one archive, or one file each
Text: armored age blocks for paste-into-email use
Keys: share yours as a QR code, or scan someone else's
Inspect: see what any age file is encrypted to, without decrypting it

LOCAL-FIRST, ZERO BACKEND
No accounts. No cloud. No telemetry. No analytics. No ads. No third-party SDKs. Your vault stays on your device, encrypted at rest with a master key in the iOS Keychain, unlocked by Face ID, Touch ID, or an app password you set. The only network request AgePony ever makes is fetching a GitHub user's public keys, when you ask, and you can route even that through an HTTP proxy.

OPEN SOURCE
Apache 2.0. Every line at github.com/norsehorse-dev/AgePonyiOS.

COMPATIBILITY

Any age v1 implementation (FiloSottile/age, str4d/rage, and more)
Post-quantum recipients need age CLI 1.3 or newer
YubiKey recipients through age-plugin-yubikey
SSH-ed25519 and SSH-RSA public keys
Binary and PEM-armored age files
Detached signatures verify with ssh-keygen -Y verify
Requires iPhone with iOS 18.6 or later

PRIVACY
AgePony collects nothing and there is no server. Your data never leaves your device unless you export it. Policy: agepony.com/privacy.

SUPPORT
Docs, FAQ, and contact: agepony.com/support. Email: NorseHorse@norsehor.se

Built quietly in Alabama by NorseHorse. Sibling to PGPony, the same idea for OpenPGP keys.

## Key features

- Post-quantum encryption (ML-KEM-768)
- File signing and verification
- Encrypt to various recipients
- Support for any file size
- Passphrase-locked notes
- Biometric and PIN app lock
- Local-first, zero-backend design


## Frequently asked questions about AgePony

### What is AgePony's primary function?

AgePony is a mobile application designed for modern file encryption and signing, utilizing the age protocol. It allows users to encrypt any file for specific recipients, sign files to prove authenticity, and manage sensitive data locally on their device.

### Does AgePony use post-quantum cryptography?

Yes, AgePony incorporates post-quantum cryptography with hybrid ML-KEM-768 + X25519 recipients. This ensures that files encrypted today remain private even if current encryption standards become vulnerable to quantum computers in the future.

### Can AgePony encrypt files of any size?

Yes, AgePony supports encrypting, decrypting, signing, and verifying files of any size. The application handles large files efficiently by not holding them entirely in memory, treating a 1 GB video similarly to a text file.

### How does AgePony handle file signing?

AgePony allows you to prove a file's origin and integrity. You can sign files for detached verification or encrypt and sign simultaneously. Signatures are automatically verified upon decryption, ensuring the file has not been altered.

### What are the security features of AgePony?

AgePony offers robust security, including biometric (Face ID/Touch ID) or PIN/password app locking, with configurable auto-lock timers. It also features an optional duress password that can silently wipe the vault if compromised.

### Does AgePony have ads?

No, AgePony is ad-free. The application is built with a local-first, zero-backend approach, meaning it does not contain advertisements, telemetry, analytics, or third-party SDKs.

### Is AgePony available on other platforms besides iPhone?

Based on the provided data, AgePony is currently supported on iPhone. Information regarding availability on other platforms like Android or desktop is not specified.

### How often is AgePony updated?

AgePony was last updated on August 26, 2026, with version 4.0.0. This indicates a recent update, suggesting ongoing development and maintenance for the application.

## Version history (last 5 releases)

### 4.0.0 — 2026-08-26

AgePony 4.0.0

Encrypt to a YubiKey. AgePony now accepts age-plugin-yubikey recipients (age1yubikey1...) and encrypts to them.
Unlock with a password or PIN, with or without biometrics. An optional duress password silently wipes the vault when it is entered.
Show any public key as a QR code to hand it to someone in person, alongside the existing scanner.
Recently deleted. Restore an identity or recipient you removed by mistake, for 30 days.
Route the one network call, the GitHub key fetch, through an HTTP proxy. Settings, Network.
In-app Help, Security, and Licenses pages.
Pick a Light, Dark, or System theme, set how long before the app locks, and choose how long copies stay on the clipboard. Colored key avatars, and a Clear Temporary Files button.

### 3.1.0 — 2026-07-30

AgePony 3.1.0 brings post-quantum encryption, and makes file size stop mattering.

Post-quantum
- Quantum-safe hybrid keys (ML-KEM-768 + X25519) that resist future quantum computers, interoperable with the age CLI 1.3 and newer.
- Clear quantum-safe badges so you always know your protection.
- New re-encrypt tool: move files you already hold onto a quantum-safe key. Your original is left untouched.

Any size
- Encrypt and decrypt files of any size. Nothing is held in memory, so a 1 GB file works like a small one.
- Signing and verifying stream too, so a large file no longer has to fit in memory to be signed.
- The scrypt work factor is adjustable now, for devices with less memory to spare.

Signing
- Encrypt and sign a file in one step. The signature now travels sealed inside the encrypted file, so one file goes out instead of two and the ciphertext no longer reveals who signed it.
- Signatures are checked as a file decrypts, and the signer is shown.
- Files signed with AgePony 2.0, as a .age alongside a .age.sig, still verify.

Also
- Encrypting several files now asks: one archive, or one encrypted file each.
- Inspect any age file to see what it is encrypted to, without decrypting it.
- Rename saved recipients, and save a pasted key with a name.
- Returns to the tab you left on re-lock.

Everything still runs on your device. No tracking, no ads.

### 2.0 — 2026-06-19

AgePony 2.0 adds signing.

Sign files with an in-app SSH key, a Secure Enclave key, or an external security key (YubiKey, Token2) over NFC, including PIN-protected keys
Signatures are standard SSHSIG, verifiable anywhere with ssh-keygen
Verify signatures from other people right in the app
Encrypt several files at once, bundled into a single .age

AgePony is now fully open source at github.com/norsehorse-dev/AgePonyiOS. Plus reliability and polish throughout.

### 1.1 — 2026-06-14

New in this version:

- A quick walkthrough now greets you the first time you open AgePony and shows you around each part of the app. You can replay it anytime from Settings.

- You can now rate AgePony or send feedback straight from the Settings screen.

- Small refinements and polish throughout.

Thanks for using AgePony.

### 1.0 — 2026-06-03

No release notes.

## Apps similar to AgePony

| App | Rating | Price | Category |
| --- | --- | --- | --- |
| [Libre Key Companion](https://appshunter.io/ios/app/libre-key-companion/id6785083417) | — | Free | Utilities |
| [KeyForge - Password Generator](https://appshunter.io/ios/app/keyforge-password-generator/id6761026347) | — | Free | Utilities |
| [TIMER - Work Timer Tracker](https://appshunter.io/ios/app/timer-work-timer-tracker/id1128211054) | 4.8 (4) | $6.99 | Utilities |
| [Zip-Share](https://appshunter.io/ios/app/zip-share/id1491885590) | — | Free | Utilities |
| [CypherAir](https://appshunter.io/ios/app/cypherair/id6760628384) | — | Free | Utilities |
| [FTeleport - P2P File Transfer](https://appshunter.io/ios/app/fteleport-p2p-file-transfer/id6755894841) | — | $4.99 | Utilities |

## More apps by Kevin Stewart

- [NorseHorse](https://appshunter.io/ios/app/norsehorse/id6752630128)
- [Polly's Place](https://appshunter.io/ios/app/pollys-place/id6759225948)
- [Hay or Neigh?](https://appshunter.io/ios/app/hay-or-neigh/id6759813889)
- [PGPony: PGP & GPG Encryption](https://appshunter.io/ios/app/pgpony-pgp-and-gpg-encryption/id6759994432)
- [Cashout: Tip & Shift Tracker](https://appshunter.io/ios/app/cashout-tip-and-shift-tracker/id6760863414)
- [HeardCheck](https://appshunter.io/ios/app/heardcheck/id6760924907)

All apps by Kevin Stewart: https://appshunter.io/developer/1840294398

## Related topics

[yubikey](https://appshunter.io/ios/topics/yubikey)

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-08-27.*
