DotBGE encrypts files on your device for yourself or a contact, with a password option too. It uses the open .bge format.
What can I use it on?
The iPhone app requires iOS 17.6 or later and also runs on iPad in iPhone compatibility mode. The Android app requires Android 8.0 or later. The bge command-line tool runs on macOS and Linux. Both mobile apps support identity and password encryption, encrypted messages, a vault and supported previews. Pro adds batch and folder encryption. A macOS menu-bar app is in development.
What is the difference between encrypting for myself and a contact?
Choose Me to encrypt with your own public key; only your matching private key opens that file. To encrypt for a contact, first get their public key through their identity card, then select them. Only their matching private key opens that encrypted file; your own private key does not.
What is an identity card?
An identity card carries a name and a public key. Import a contact’s QR code or .bgekey file to save their public key in Contacts. You can then encrypt for that contact by selecting their name, without a shared password. The card does not contain a private key and cannot decrypt files. To let someone encrypt for you, share your own identity card with them.
How does encryption work?
Identity mode encrypts for a recipient’s public key; the corresponding private key is needed to decrypt. Password mode uses a passphrase. The current .bge format uses RSA-4096-OAEP and AES-256-GCM for identity encryption, and PBKDF2-SHA512 and AES-256-GCM for password encryption. Read the format specification.
Where are my files and keys?
Encryption and decryption happen on your device. DotBGE has no account service or file-upload server. Private keys are protected by the system Keychain on Apple devices and Android Keystore on Android. You can export an encrypted identity backup; keep its password safe. Without the key or password, DotBGE cannot recover the file.
Optional iCloud sync stores encrypted vault files in your own iCloud container. It also stores metadata, including original filenames, display labels and collection names, outside the encrypted .bge payload. See the privacy policy.
Does preview write to disk?
Preview stays on your device. Some iOS previews use protected temporary files, including media and large files; interrupted processes may leave files until cleanup on a later launch. Exporting or extracting writes plaintext to the destination you select. Details are in the privacy policy.
What is free?
Single-file encryption, decryption and supported previews are free. The free vault holds up to 20 files on iOS and Android, starting with version 1.3.0. Pro adds batch and folder encryption, an unlimited vault and multiple identities. Availability and prices vary by store and region; see pricing.
Where can I learn more?
Read the help and support page, the privacy policy, or the open format documentation. Contact support@dotbge.app with questions.