App analysis · 20.10.2026

OpenKeychain: Easy PGP

org.sufficientlysecure.keychain · version 6.0.4

0SDKs found

0companies

0companies outside the EEA

6sensitive permissions

In short

SDKs found: 0. Companies: 0, of which outside the EEA — 0. Sensitive permissions: 6 — all code inside the app, including embedded SDKs, can use them.

Sensitive permissions (6)

camera — android.permission.CAMERA
files on the device — android.permission.READ_EXTERNAL_STORAGE
audio files — android.permission.READ_MEDIA_AUDIO
photos — android.permission.READ_MEDIA_IMAGES
videos — android.permission.READ_MEDIA_VIDEO
NFC: reading cards, documents and tags — android.permission.NFC

All manifest permissions (17)

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.INTERNET
android.permission.NFC
android.permission.POST_NOTIFICATIONS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.WRITE_SYNC_SETTINGS
org.sufficientlysecure.keychain.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: org.sufficientlysecure.keychain.apk (11.5 MB)

Package: org.sufficientlysecure.keychain · version 6.0.4 (code 60400)

Android: minimum API 15, target API 34

File SHA-256: f88374b9113aa9ddba865258bd989eb3ac2ca1577d92e59d6e84228e080674ce

Developer signature (SHA-256): 2805a6f465acb923103a2ab3a145e1a97a74c44acf751250b588ebc3f88a0cc9

Signed by: fdroid.org (ORG, UK) · outside EEA · key since 2013-09-11

File source: F-Droid (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app