PGP in plain English

PGP (Pretty Good Privacy) is a way to encrypt messages (often email) so only the intended recipient can read them — useful when you need a private, verifiable…

This post is general information, not legal advice. If you may face retaliation or legal risk, consider speaking to a qualified lawyer or a trusted journalist organization before acting.

PGP (Pretty Good Privacy) is a way to encrypt messages (often email) so only the intended recipient can read them — useful when you need a private, verifiable channel.

It’s commonly used for email encryption and for publishing “public keys” that sources can use to contact an organization securely.

People sometimes recommend PGP like it’s the one true answer. In practice, the best tool is the one you can use correctly while you’re tired, stressed, and trying not to make mistakes.

Why people like PGP

  • It can work without trusting a single provider.
  • It’s widely supported in security communities.

Why PGP is hard for beginners

PGP is easy to get wrong:

  • key management is confusing,
  • mistakes can leak plaintext,
  • setup varies across devices and email clients.

PGP is a bit like a padlock with no help desk. It can be great — but only if you’re comfortable with it.

A practical suggestion

If you’re non‑technical, you may be safer using a well‑reviewed end‑to‑end encrypted messenger recommended by the organization you’re contacting.

If an organization publishes a PGP key and you’re comfortable using it, follow their official instructions carefully.

Where PDF Changer fits

PDF Changer focuses on making the document itself safer to share (on‑device scrubbing, no uploads). Message encryption is a separate layer.

If you’re getting started, read Anonymity 101 and device and network basics first — they prevent the most common mistakes.

Next step: scrub a PDF locally.