Open the Sign tab.
Trusted signers live in the Sign tab, next to the signing keys. This is the same place you sign and sign-then-encrypt from.
// guide / manage-trusted-signers
How to manage trusted signers.
Trusted signers are the people whose signatures you accept. AgePony keeps them in an allowed_signers list, checks incoming files against it, and names the signer when a file verifies. You manage the list from the Sign tab.
// at a glance
- Open the Sign tab
- Add a signer and their key
- Verify an incoming file
- Read who signed it
- Remove signers you drop
Prerequisites
- AgePony installed
- The public key and an identifier for each person you want to trust
Add a signer.
Add a person with an identifier, such as their email, and their public signing key. These are the same two fields as a line in an OpenSSH allowed_signers file, so a list you already keep transfers over directly.
Verify an incoming file.
Decrypt a sign-then-encrypt file, or verify a detached signature. AgePony checks the signature against your trusted signers as the file streams past.
Read the result.
If the signer is on your list, AgePony names them. If not, it reports an unknown signer, and it is up to you whether to trust the file.
Remove a signer.
Delete anyone you no longer trust from the same list. From then on their files verify as an unknown signer rather than a named one.
friend@example.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA...
# verify the same file on a laptop
ssh-keygen -Y verify -f allowed_signers \
-I friend@example.com -n agepony \
-s report.pdf.sig < report.pdf
AgePony's trusted signers use the same format OpenSSH expects, so the list is portable both ways.
Verify it worked.
- A signed file from a listed signer shows their name on verify.
- A file from an unlisted signer reports an unknown signer.
- ssh-keygen -Y verify agrees, using the same allowed_signers entry.
Common questions.
What is allowed_signers?
It is the OpenSSH file format that maps an identifier to a public key for signature verification. AgePony keeps its trusted signers in the same shape, so the list is portable to and from ssh-keygen.
What if a signer is not on my list?
The file still decrypts, but AgePony reports the signer as unknown rather than naming them. You decide whether to trust it.
Is this on both platforms?
Yes. The Sign tab and trusted signers are on iPhone and Android.
Can I verify with ssh-keygen too?
Yes. AgePony produces standard SSHSIG signatures and uses the allowed_signers format, so ssh-keygen -Y verify checks the same files against the same list.
Next steps.
Get AgePony
Free file encryption for iOS and Android. No accounts, no tracking, no servers.