jkey

Cross-platform command-line password manager and TOTP verifier.

All data is encrypted with AES-256-CBC + HMAC-SHA256 and stored per data type under ~/.config/jkey/. Pure Python — no OpenSSL or libsodium required.

Install

pipx install jkey

Or with plain pip:

pip install --user jkey

Or run without installing:

pipx run jkey --help

Quick Start

# Initialize vault (set master password)
jkey pv init

# Add a 2FA account from QR code image
jkey 2fa add ./github.jpg

# List TOTP codes (optional keyword filter)
jkey 2fa ls
jkey 2fa ls github

# Generate a random password
jkey pm get -L 24

# Store a password
jkey pm add my-site

# List all stored passwords
jkey pm ls

# Encrypt/decrypt any file
jkey pv encrypt secret.pdf
jkey pv decrypt secret.pdf.jkey -o secret.pdf

Commands

Command	Description
`jkey 2fa ls [keyword]`	List TOTP accounts and codes
`jkey 2fa add <image>`	Import from QR code image
`jkey 2fa rm <account>`	Remove a TOTP account
`jkey rc add <file>`	Import recovery codes from file
`jkey rc ls [keyword]`	List recovery codes
`jkey rc rm <account>`	Remove recovery codes
`jkey pm ls [keyword]`	List stored passwords
`jkey pm get [-L N]`	Generate a random password
`jkey pm add <name>`	Store a password (prompts for input)
`jkey pm edit <name>`	Update an existing password
`jkey pm rm <name>`	Delete a stored password
`jkey pm import <file.csv>`	Import passwords from a browser CSV export
`jkey pv init`	Initialize the encrypted vault
`jkey pv unlock`	Unlock the vault
`jkey pv lock`	Lock the vault
`jkey pv status`	Show vault status
`jkey pv set-pw`	Change master password
`jkey pv encrypt <file>`	Encrypt a file
`jkey pv decrypt <file>`	Decrypt a `.jkey` file
`jkey pv export totp`	Export TOTP secrets (re-enters master password)
`jkey pv export passwords`	Export passwords as CSV
`jkey pv export recovery`	Export recovery codes
`jkey pv export qr -o <dir>`	Export QR code images
`jkey pv export all -o <dir>`	Export everything

Set JKEY_PASS environment variable to skip the password prompt. Set JKEY_SESSION_TIMEOUT to change the session cache lifetime (default: 300 seconds).

How It Works

Data is encrypted with AES-256-CBC + HMAC-SHA256 and stored in ~/.config/jkey/:

~/.config/jkey/
├── .session          # Session cache (5 min timeout)
├── totp.jkey         # Encrypted TOTP secrets
├── passwords.jkey    # Encrypted passwords
├── recovery.jkey     # Encrypted recovery codes
└── qr/               # Encrypted QR images

Back up ~/.config/jkey/ (excluding .session) to migrate to another machine.

Dependencies

Runtime dependencies:

portalocker — cross-platform vault file locking
opencv-python-headless — optional, needed only for jkey 2fa add QR scanning. Install with pip install jkey[qr].

Pure Python, no OpenSSL or libsodium required.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

jkey-0.4.1.tar.gz (34.2 kB view details)

Uploaded Sep 10, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

jkey-0.4.1-py3-none-any.whl (27.4 kB view details)

Uploaded Sep 10, 2026 Python 3

File details

Details for the file jkey-0.4.1.tar.gz.

File metadata

Download URL: jkey-0.4.1.tar.gz
Upload date: Sep 10, 2026
Size: 34.2 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for jkey-0.4.1.tar.gz
Algorithm	Hash digest
SHA256	`5ba3dc8b44982dad07fbbd16c71531026071377ba807fee3bd60e22123868565`
MD5	`540465788954b2e6adf40777b57bc197`
BLAKE2b-256	`d029f9ed7830fc2974ff23b3331b12d15d649e3e9c495031ab87bd0039da4dbe`

See more details on using hashes here.

Provenance

The following attestation bundles were made for jkey-0.4.1.tar.gz:

Publisher: publish.yml on imjiaoyuan/jkey

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: jkey-0.4.1.tar.gz
- Subject digest: 5ba3dc8b44982dad07fbbd16c71531026071377ba807fee3bd60e22123868565
- Sigstore transparency entry: 2782670696
- Sigstore integration time: Sep 10, 2026
Source repository:
- Permalink: imjiaoyuan/jkey@a86c0beca37cf014c774fe9779c14d910ad9bc9d
- Branch / Tag: refs/tags/v0.4.1
- Owner: https://github.com/imjiaoyuan
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish.yml@a86c0beca37cf014c774fe9779c14d910ad9bc9d
- Trigger Event: push