GPG Suite

GPG Suite combines GPG Keychain, GPG Services, MacGPG and the optional GPG Mail integration. It suits people exchanging OpenPGP-encrypted files/email, verifying release signatures or managing their own and correspondents' keys. Keychain creates/imports/exports keys; Services applies encryption/signature actions to selected files or text; MacGPG provides the command-line engine. GPG Mail integrates with Apple Mail on explicitly supported macOS releases.

Version and installation

This catalog contains GPG Suite 2023.3, not the publisher's current Golden Gate beta. The official versioned DMG is 48,684,152 bytes by HEAD. Its release includes GPG Mail 7.2 for macOS Ventura and fixes Mail 13.5 compatibility. Do not install this historical Mail plugin on a newer macOS assuming it is compatible: Apple Mail integration is OS/version-specific, while other suite tools have different support requirements. The checked exact release/FAQ do not establish one complete minimum OS, packaged CPU matrix or RAM requirement for all 2023.3 components; those remain explicit gaps. Historical notes document Apple Silicon support in MacGPG, but that is not a complete inspection of every 2023.3 binary.

Open the DMG, verify its published signature/checksum and follow the installer. System components can require administrator authorization. Choose components during installation if you do not need the Mail plugin. Mail integration must be enabled/authorized through the applicable Mail settings; newer extension-based beta instructions on the current homepage are not the 2023.3 installation procedure. No separately installed GnuPG is needed for the bundled MacGPG engine. Hardware tokens/smart cards are optional and have their own drivers/access requirements.

Keys and safe use

Encrypting to a recipient requires the correct public key; decrypting and signing require your private key and its passphrase or token. Verify fingerprints with the intended person through a separate trusted channel before trusting an imported key. A successful signature check proves correspondence to a key, not automatically the real-world identity or safety of a file. Keep private keys, revocation certificates and recovery backups secure; losing them can make encrypted material permanently unreadable. Never upload a secret key to a public key server.

Public key publication/search is optional and uses online key servers. It can expose names/email addresses and may be difficult to reverse once copied. Local file encryption/decryption does not require a GPGTools account or network; email transport, key retrieval, updates and license activation do. Encryption protects message/file content only within the relevant workflow: recipients, filenames/headers, local plaintext copies, compromised devices and Mail's processing can remain sensitive.

License and fees

The suite including GPG Mail is open-source under GPL terms, according to the official FAQ, but the publisher's GPG Mail binary requires a paid Support Plan after its trial for continued encryption/signature functions. Other suite tools remain usable without purchasing the Mail plan. The FAQ says encrypted email remains decryptable after the trial, while encryption/signing/verification are restricted. Support Plan versions correspond to Mail/macOS versions; current GPG Mail 8 beta uses a different subscription arrangement, so do not confuse its terms with historical Mail 7 plans. Consult current pricing and component licenses before purchasing or redistributing.

Privacy and reliability

GPGTools' privacy policy covers app update checks, optional crash reports and activation. Opt-in crash data may be stored by a service partner; activation links email/plan information with device-related data. Review and redact logs before sharing, particularly paths, addresses or key identifiers. The website separately uses Matomo and server logs. This listing does not promise that all suite functionality has no network or telemetry.

Confirm the encrypt/sign toggles and recipient keys before sending sensitive mail. Keep remote-content handling conservative and test interoperable messages with the recipient. OS updates can break Mail plugins; back up keys and check publisher compatibility notices before upgrading a machine that relies on GPG Mail. Installing cryptographic software alone is not a complete security or anonymity policy.

Sources: Official suite, Exact 2023.3 notes, License/support FAQ, Privacy, Versioned DMG.

Screenshot scope

The associated screenshot comes from the publisher’s GPG Keychain support article about finding and sharing public keys. It shows a genuine macOS GPG Keychain main window with example key entries. It illustrates a suite component and is not verified as a capture of the catalog’s 2023.3 release. A valid dedicated GPG Suite product icon has not been associated. Source: Official GPG Keychain support guide.