PGPy
Pretty Good Privacy for Python
Decision gist · record as of 2026-08-14
No, unless you have a specific legacy requirement. The package is dormant (last release 2022-11-24, no commits in 1359+ days), so it will not receive security updates or compatibility fixes for modern Python or cryptography versions. For new projects, use actively maintained alternatives like python-gnupg or cryptography directly. If you must use PGPy, audit its OpenPGP implementation independently and isolate it in a controlled environment.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python >= 3.6; cryptography, pyasn1, and six must be installed as dependencies.
- Installation friction is high: the package has no runtime dependencies listed in the fact sheet, yet the description notes requirements for cryptography, pyasn1, and six.
- The project is dormant—last release was 2022-11-24, over 1359 days ago—so expect no active maintenance or security updates.
License · maintenance · safety
BSD-3-Clause (permissive) — BSD-3-Clause is permissive, allowing commercial and private use with minimal restrictions. You must include a copy of the license and acknowledge the original authors, but there are no copyleft obligations.
last release 2022-11-24 (1359 days) · last repo commit 2024-08-20 · 344 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 7,832,441 downloads/mo, #1,690 on PyPI
Alternatives
Verify before relying
pip install PGPy
from pgpy import PGP
# Load a key or create signatures/encrypt messages
# (See https://pgpy.readthedocs.io/en/latest/ for full API)- Whether the listed dependencies (cryptography, pyasn1, six) are correctly declared in the package metadata, given the discrepancy between the fact sheet and description.
- Current compatibility with modern Python versions (3.10+) and recent cryptography library releases, given the dormant maintenance status.
- Whether the package's OpenPGP implementation remains compliant with RFC 4880 or any subsequent updates.
What it is and what it does
PGPy is a pure-Python implementation of the OpenPGP standard (RFC 4880), allowing you to work with PGP keys, signatures, and encrypted messages within Python applications. It handles loading keys in ASCII-armored and binary formats, creating and verifying signatures with RSA, DSA, and ECDSA algorithms, and encrypting/decrypting data using RSA and ECDH. The library requires Python >= 3.6 and depends on the cryptography, pyasn1, and six packages.
The project is currently dormant: the last release was 2022-11-24, and there have been no commits or updates for over 1359 days. While the repository is not archived and has 344 stars, the lack of active maintenance means security patches and compatibility fixes are unlikely. The library is classified as Beta (Development Status :: 4), reflecting its maturity level but also suggesting caution for production use without independent security review.
Use it for
- Load and parse existing PGP keys and signatures from files or external sources for verification workflows.
- Create and verify digital signatures on documents or data using RSA, DSA, or ECDSA algorithms.
- Encrypt messages with RSA or ECDH and decrypt them within a Python application.
- Build custom cryptographic workflows that require OpenPGP compliance without external GPG/GnuPG binaries.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No, unless you have a specific legacy requirement.
The package is dormant (last release 2022-11-24, no commits in 1359+ days), so it will not receive security updates or compatibility fixes for modern Python or cryptography versions. For new projects, use actively maintained alternatives like python-gnupg or cryptography directly. If you must use PGPy, audit its OpenPGP implementation independently and isolate it in a controlled environment.
Install
pgpy on PyPI
Before you install
Installation friction is high: the package has no runtime dependencies listed in the fact sheet, yet the description notes requirements for cryptography, pyasn1, and six. The project is dormant—last release was 2022-11-24, over 1359 days ago—so expect no active maintenance or security updates.
Requires Python >= 3.6; cryptography, pyasn1, and six must be installed as dependencies.
License in practice
BSD-3-Clause is permissive, allowing commercial and private use with minimal restrictions. You must include a copy of the license and acknowledge the original authors, but there are no copyleft obligations.
Quickstart
pip install PGPy
from pgpy import PGP
# Load a key or create signatures/encrypt messages
# (See https://pgpy.readthedocs.io/en/latest/ for full API)Verify before relying
- Whether the listed dependencies (cryptography, pyasn1, six) are correctly declared in the package metadata, given the discrepancy between the fact sheet and description.
- Current compatibility with modern Python versions (3.10+) and recent cryptography library releases, given the dormant maintenance status.
- Whether the package's OpenPGP implementation remains compliant with RFC 4880 or any subsequent updates.
Package facts
| License | BSD-3-Clause permissive |
| Python support | Supports the current Python release >=3.6 |
| Install friction | High. Source build required |
| Runtime dependencies | None |
| Maintenance | Dormant 1,359 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 7,832,441 / month, #1,690 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaIntended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: MacOS :: MacOS XOperating System :: Microsoft :: WindowsOperating System :: POSIX :: LinuxProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.6Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Programming Language :: Python :: Implementation :: CPythonTopic :: SecurityTopic :: Security :: CryptographyTopic :: Software Development :: LibrariesTopic :: Software Development :: Libraries :: Python Modules |
Evidence: PGPy-0.6.0.tar.gz
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “OpenPGP implementation Python”
- PGPyPGPy implements OpenPGP (RFC 4880) in pure Python, enabling you to…
- pysequoiaPySequoia provides OpenPGP encryption, decryption, signing, and…
- PGPy13PGPy13 is a Python library for OpenPGP encryption, decryption, and…
Give your agent the search over MCP, or paste the wish link into any chat.
More Libraries packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
Pluggy provides a plugin system that lets you define hook specifications and register implementations to be called in sequence, enabling extensible Python applications without tight coupling.
Install it if you're building an extensible application or framework.
Provides parsing, arithmetic, and recurrence rule computation for dates and times, with timezone support and iCalendar RFC compliance.
Install it if you need to parse flexible date strings, compute relative dates, handle timezones, or work with recurrence rules—it's the de facto choice for these tasks.
Six provides utility functions to write Python code that runs on both Python 2.7 and Python 3.3+, smoothing over language differences between the two versions.
pytest is a testing framework that lets you write test functions using plain assert statements and automatically discovers and runs them, with detailed failure reporting.
See also gnupg · PGPy13 · pysequoia · python-gnupg · rsa · sshpubkeys · gmssl · sopsy · tlslite-ng · oscrypto