wp2pgpmail

Your visitors fill in the form. The mailbox only gets the carbon.

Gravity Forms PGP Encryption encrypts each notification with the recipient's PGP public key before it leaves your WordPress server.

Order · billed yearly, renews automatically

20% off every renewal First year at full price, then 20% less every year.

Secure payment by Stripe. Updates and support for the whole year. Stop renewing anytime: the plugin keeps working, without updates.

Contact form · original What your visitor types

Type anything. The copy below is re-encrypted as you write.

Notification · copy received PGP
Subject
New submission [encrypted]
-----BEGIN PGP MESSAGE-----

wV4D1O8m/+YrPqoSAQdAylg95F/lqxjSb8ZB8a6R3lHXdHS8t6wOkdI4TY6G
52swl55BlRkgqGR5HinOvx1JrDn91EFcl3DcCGbZFZf4SUkTJ+PuRMhsUx1J
+0hBwjr80qwBQUu3afcoJrypC0VMKM+UEUC7SNKNk7yfwsM71jo/huO9IxwS
v7rrOWI8x6ADBNeHKOO7CSP1YDDQb+7dRQrAM+EAvoZJjU+EgvE8RSjcKdWi
SkD52GBadxn4p2csTHr3Xsl/EwYPkIj6tcHSsY59UL4xQpjVPWEi5dIP5KoJ
IWShIf8JCI5+VqCjjhWpvijxXiAsOCWy6CZvgKiTcsq1jk/b/xjM19Lf3VFs
=q5zq
-----END PGP MESSAGE-----

Real OpenPGP, demo key generated for this page.

Setup is one word in a subject line.

No new form builder, no new mailer. You keep your Gravity Forms forms and notifications, and mark the ones to encrypt.

Full installation guide
  1. 1

    Upload and activate the plugin

    Plugins → Add New → Upload, then enter your license key for automatic updates.

  2. 2

    Paste the recipient's public key

    PGP Public Keys → Add New. The key's email address must match the notification's recipient.

    No key yet? Generate one in your browser.

  3. 3

    Add [encrypted] to the subject

    That notification now arrives as a PGP message.

Form GF-PGP · Options Continuation sheet

Check what applies to your forms.

  • Any form, every field

    Choose which Gravity Forms notifications are encrypted. All the fields they carry go into the PGP message.

  • File uploads too

    Uploaded files are encrypted one by one and attached as .pgp files.

  • One key per recipient

    Store as many public keys as you need. Each recipient gets a copy only their own key opens.

  • Nothing left in WordPress

    Per form, delete the Gravity Forms entry once the notification is sent.

  • Plain-text notifications

    Per form, switch notifications to plain text so they decrypt cleanly in any mail client.

  • Standard OpenPGP

    Messages open in Thunderbird, Mailvelope, GPG Suite, Gpg4win or any OpenPGP tool. No viewer to install, no service in between.

What it protects, plainly.

Protected

The notification email: from the moment it leaves your server, through every mail relay, in the inbox and in its backups. Without the private key, it is unreadable.

Your part

Serve your site over HTTPS, keep your private key private, and turn on entry deletion if you do not want submissions stored in WordPress.

Simply the best support I’ve ever experienced from a software company! With the need for secure form transmission, wp2pgpmail is the perfect solution for encrypted mail through WordPress. Easy to install, quick to implement, painless to administrate.

Timothy G. Senior Executive Producer, GrafWeb Internet Media Studios, New York

An immediate answer from the support team, with the right tip to fix my problem! Thanks so much for your quick response, I really appreciate that level of attention and support.

Rebecca C. Web designer and developer, New York

One license, one year of updates and support.

  • The plugin, and every update for the year, delivered in your WordPress dashboard
  • Support by email, answered by the people who write the plugin
  • Local and staging sites never count toward your limit
  • Renews automatically at 20% off; stop it anytime from your account
  • No renewal, no lock-out: the plugin keeps working, only updates and support stop

Already a customer with an expired license? Renew it with your existing key and save 20% every year.

Order · billed yearly, renews automatically

20% off every renewal First year at full price, then 20% less every year.

Secure payment by Stripe. Updates and support for the whole year. Stop renewing anytime: the plugin keeps working, without updates.

Free, and staying free.

PGP Key Generator plugin

Give your visitors a key generator, encryption and decryption, in their browser. Try it online first.

wp2pgpmail on WordPress.org

The original free plugin, since 2010: a contact form whose messages are encrypted in the visitor's browser.
In preparation

Not on WordPress?

A hosted encrypted contact page and a form you can embed on any site: Squarespace, Wix, Webflow, static sites. Messages are encrypted in the sender’s browser with your PGP key and land in your usual inbox.

Join the waitlist

Questions before ordering

Do my visitors need PGP?

No. They fill in the form as usual. Only the person receiving the notification needs a PGP key pair to read it.

Where does the encryption happen?

On your WordPress server, when Gravity Forms sends the notification. The submission reaches your site over HTTPS like any form; the email leaves it already encrypted, so mail servers and anyone with access to the mailbox only see the PGP message.

Which Gravity Forms license do I need?

Any of them. The plugin works with Gravity Forms Basic, Pro or Elite, on WordPress 5.0+ and PHP 7.3+ (PHP 8.x supported).

What happens when the year ends?

Your license renews automatically at 20% off (from $159/year) and updates keep coming. If you stop the renewal, the plugin keeps working; you just stop receiving updates and support.

Can I try it first?

Yes: the free wp2pgpmail plugin on WordPress.org encrypts messages from its own contact form. As the free version is the trial, the Pro license is not refundable.

More in the docs and FAQ. Maintained since 2013, version 1.37 released February 2026 (changelog).