DotBGE vs PassPony

Encrypt private documents and photos, then share them with people you trust. DotBGE protects files directly on your iPhone using a recipient’s identity or a password — with no DotBGE account required. FREE FOR EVERYDAY FILES • Encrypt and decrypt individual files. • Encrypt text messages and share them as .bge files. • Keep up to 20 encrypted files in your iOS vault. • Use one identity and preview supported files after decrypting. SHARE WITH THE RIGHT PERSON Add trusted contacts using identity cards. Choose a recipient to create files that only their private key can decrypt, without exchanging a shared password. Share your own card as a QR code, link or .bgekey file so others can encrypt files for you. PREFER A PASSWORD? Protect a file with a passphrase for one-time sharing. The recipient can open it in DotBGE using that password. Send the password through a separate channel. A PRIVATE VAULT, KEPT ORGANIZED Unlock your vault with Face ID or Touch ID. Create collections with names, colors and icons, and add a file to several collections without making copies. Optional iCloud sync makes your encrypted vault and collections available across your own devices. DECRYPT, PREVIEW, KEEP EXPLORING View supported photos, PDFs, text, audio and video inside the app. Enable Reuse Authentication in Vault to swipe through supported vault files, and optionally show photo thumbnails. Both settings are off by default. Some previews use protected temporary files; see the privacy policy for details. MESSAGES YOU CAN SHARE Type or paste text, encrypt it for yourself, a contact or with a password, then send the .bge message file through your chat app. Recipients open it in DotBGE to read and copy the decrypted text. MORE FILES, MORE CONTROL WITH PRO • Batch encryption for multiple files. • Folder and structured encryption, with one encrypted package or separate encrypted files. • An unlimited vault and multiple identities. • Saved Quick Tasks for repeating folder workflows. For folder encryption, choose the save location and whether to keep originals. Optionally hide names or select which file types to encrypt. Files outside the selection stay unencrypted. Existing encrypted outputs are skipped, even when the source has changed; Quick Tasks do not automatically refresh those files. ON YOUR DEVICE. IN AN OPEN FORMAT. DotBGE uses RSA-4096 and AES-256-GCM with the documented .bge format. Encryption and decryption run on your device. Open .bge files from Files, Mail or other apps that support document sharing, or encrypt through the share sheet. Pro is available through in-app purchase. Single-file encryption, decryption, encrypted messages and supported previews remain free. Designed for iPhone; runs on iPad in compatibility mode. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdfla/ Privacy Policy: https://dotbge.app/privacy

PassPony is a password manager for people who want to own their passwords. Every entry is one encrypted file in a store you control, in the same format as the pass and passage command line tools. Your Mac, your server, and your phone can all work on the same store. WHY A FILE-BASED STORE One entry, one file: the password on the first line, anything else after it. Encrypted with your keys: age identities for passage stores, OpenPGP keys for pass stores. Synced with git over HTTPS or SSH: clone your existing store, publish a new one, and resolve conflicts per entry, never with a silent merge. Interoperable: commits match the pass CLI format, so the store stays fully usable from the desktop tools. EVERYDAY USE AutoFill: your passwords appear above the keyboard when you sign in. Only entry names are indexed; nothing decrypts until you fill. Passkeys: save a passkey for a site and sign in with it. It lives in that site's entry, encrypted with your keys, and syncs like everything else. One-time codes: TOTP with a countdown ring, HOTP counters, and import from an authenticator app's export QR codes. Face ID or Touch ID unlock, with a five-minute grace window shared with AutoFill. Ephemeral clipboard: copies are local only and clear after 45 seconds. Field-level editing that preserves the exact bytes of lines it does not touch. YOUR KEYS STAY YOURS Back up every key on your phone to one file locked with a recovery code, and restore it on a new phone. SSH sync uses a key made on your phone or imported; hosts are trusted on first use and a changed host key is refused. Phones that share a store each add their own public key to it when they sync, and you approve every new key before your entries are re-encrypted for it. Secret keys never leave a device. PRIVATE BY ARCHITECTURE No account, no signup, no PassPony server. The only network connection is the git remote you configure. No analytics, no ads, no tracking. Open source, Apache-2.0. The full app and its Rust core are published in a public git repository for anyone to audit. FORMATS passage stores encrypt with modern age identities. pass stores encrypt with OpenPGP keys (Cv25519 and X25519/Ed25519 in software). RSA-keyed stores need a smartcard, which is not supported yet. Each format keeps its own store; switching never touches the other. Localized in English, Spanish, French, German, Simplified Chinese, Brazilian Portuguese, and Russian. If you already run pass or passage, PassPony is the missing phone half of your setup. If you have never used them, the first-run tour will have you adding your first pass in about a minute.