PGPony vs Sentry Shield

PGPony makes PGP encryption easy, private, and powerful, and every feature is free. Generate keys, encrypt to people or to a password, sign and verify, back up your whole keyring, and revoke compromised keys, all from your iPhone and iPad, in eight languages. New in 8.3.0: post-quantum signatures, NIST P-256, P-384 and P-521 keys, messages to several post-quantum recipients, and a reorganized Key Detail screen. POST-QUANTUM Encrypt with ML-KEM-768 or ML-KEM-1024 paired with X25519, and sign with ML-DSA-65 paired with Ed25519 (RFC 9980), on RFC 9580 (v6) keys or the v4 shape GnuPG 2.5 reads. Add post-quantum subkeys to a key you already have. HARDWARE SECURITY KEYS Generate a key pair on the card over NFC, or add an existing card with a tap. Sign, decrypt, and encrypt-and-sign in one step, with RSA and ECC (Ed25519/Curve25519) keys, on YubiKey, Token2, and others, over NFC or USB-C. Full card admin: PINs, factory reset, and Card Details. ENCRYPT, DECRYPT & SIGN Encrypt messages and files of any size to one or many public keys, or to a password with no keys at all, readable by gpg -c and back. Pick which subkey to encrypt to when a key has more than one. Decrypt with a private key, a hardware key, or a passphrase, and see which of your keys opened the message. Sign without encrypting, including detached signatures, and verify a file against its signature. GENERATE & MANAGE KEYS Create keys on a card or in-app: post-quantum, v6 Ed25519, classic Ed25519 + Cv25519, or RSA 2048/4096, with or without an email address. Add, revoke, or remove subkeys (including authentication subkeys) and User IDs. Full OpenPGP v6 (RFC 9580), interoperable with Sequoia PGP and GnuPG. Import from files, clipboard, QR codes, or keyservers. Make revocation certificates and export private keys (GnuPG-compatible). BACK UP & RESTORE Save your whole keyring, secret keys included, as one encrypted file. A single backup code opens it, and the same file restores onto another device. The file stays with you, never on anyone's server. KEYSERVERS Look up a recipient by email through Web Key Directory, then key servers. Add your own servers, publish to several at once, and upload an updated key straight from Key Detail. Route lookups through Tor or a SOCKS proxy, or turn on offline mode to stop every network request. PASSWORD STORE Open a pass (password-store) folder, decrypt an entry with a software or hardware key, and copy it through an auto-clearing clipboard. SHARE SHEET EXTENSION Encrypt or decrypt text, encrypt a file, or sign a file in any app: Safari, Files, Notes, Mail. SECURITY FIRST Face ID / Touch ID lock with auto-lock. Software keys live in the iOS Keychain. Keys and messages from outside are checked strictly before they are used. No analytics, tracking, accounts, or sign-up. Your private keys never leave your device, and with a hardware key they never leave the card. EIGHT LANGUAGES English, German, Spanish, French, Japanese, Brazilian Portuguese, Russian, and Simplified Chinese. Built by an indie developer who cares about your privacy. Your keys, your messages, your data, always yours. Terms of Use (EULA): https://pgpony.app/eula.html Privacy Policy: https://pgpony.app/privacy.html

Sentry Shield is an enterprise-grade device management application designed for organizations that demand uncompromising security and control over their iOS fleet. Built for IT administrators, security teams, and B2B operators, Sentry Shield transforms standard iPhones into hardened, policy-enforced devices through a unique combination of physical NFC security cards and centralized management. KEY CAPABILITIES - NFC Security Card Binding Pair each device to a physical SENTRY security card. Only an authorized cardholder can bind, unbind, or unlock the device — a tangible second factor that complements digital credentials. - Hardware Button Lockdown Disable the volume buttons, power button, and silent switch when Security Mode is active. Ideal for kiosk deployments, point-of-sale terminals, examination devices, and field operations where tampering must be prevented. - Multi-Code Unlock System Configure multiple four-digit codes with role-based scoping. Set distinct codes for device unlock, administrator override, and emergency exit. - MDM-Native Deployment Designed from the ground up for Jamf, Microsoft Intune, Mosyle, Kandji, and other MDM platforms. Deploy via VPP, push managed configurations, and integrate with your existing endpoint management workflows. - Tenant-Aware Backend The Sentry Shield client speaks fluently with multi-tenant SENTRY UEM backends. Devices automatically route to the correct tenant API based on configuration — no manual server selection required. - Demo Mode for Trials and Reviews Toggle Demo Mode to evaluate the full user experience without requiring physical NFC cards or backend connectivity. Perfect for procurement evaluations and onboarding sessions. PRIVACY AND COMPLIANCE Sentry Shield transmits only the minimum data required for operation: device identifier, hashed NFC tag UID, and tenant credentials. All traffic uses TLS 1.2+. No third-party analytics or advertising SDKs are embedded. For organizations evaluating Sentry Shield for fleet deployment, contact your customer representative for technical onboarding, Jamf integration documentation, and pilot program enrollment. Requires iOS 18.5 or later. iPhone with NFC tag reading support required for production use; Demo Mode runs on any supported device.