Skip to main content

lbx - Lock Box

A lightweight secret storage vault with CLI and Python API. Stores secrets in encrypted files with master password secured via OS keychain.

Features

  • Secure Encryption: AES-256 encryption with master password protection
  • Cross-Platform: Works on Windows, macOS, and Linux
  • Dual Interface: Both CLI and Python API available
  • Keychain Integration: Master password stored securely in OS keychain
  • Simple Workflow: Intuitive commands for daily use
  • Minimal Dependencies: Lightweight and secure

Installation

pipx install lbx

For additional installation methods, see the Installation Guide.

Quick Start

CLI Usage

# Create a new vault
lbx vault init

# Add a secret
lbx secret add github token --value ghp_xxxxxx

# Retrieve a secret
lbx secret get github token

# Update a secret
printf "new-value" | lbx secret update github token

# List services and secrets
lbx service list
lbx secret list
lbx secret list --service github

# Rename or move secrets
lbx secret rename github token api_key
lbx secret move github api_key gitlab

# Lock or delete the vault
lbx vault lock
lbx vault delete

Python API

from lbx import Lbx

vault = Lbx()

vault.add_secret("github", "token", "value")
entry = vault.get_secret("github", "token")
print(entry.value)

vault.list_services()
vault.list_secrets()

For complete examples and tutorials, see the Quick Start Guide.

Use Cases

  • Development Teams: Store API keys, database credentials, and service tokens securely
  • DevOps & CI/CD: Manage secrets in deployment pipelines and infrastructure automation
  • Personal Projects: Keep sensitive configuration data encrypted and organized
  • Security-Conscious Users: Replace plain-text config files with encrypted secret storage

Documentation

Complete documentation is available at: https://jd-35656.github.io/lbx/latest/

Requirements

  • Python 3.10 or higher
  • Windows, macOS, or Linux
  • OS keychain support (automatic)

Contributing

Contributions are welcome! Please read the Contributing Guide for details on our development process, coding standards, and how to submit pull requests.

License

MIT License - see LICENSE file for details.

Support


© 2025 Jitesh Sahani (JD)
📧 jitesh.sahani@outlook.com

"Your secrets are safe, your mind at peace."
🐺 Crafted by a dreamer, for dreamers 🐺

Metadata

Release files for lbx 1.3.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for lbx 1.3.0
File Size Uploaded
lbx-1.3.0.tar.gz 61.9 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for lbx 1.3.0
File Interpreter ABI Platform
lbx-1.3.0-py3-none-any.whl Python 3 none any Details

Total release size: 88.1 kB

Release files / lbx-1.3.0.tar.gz

Download URL lbx-1.3.0.tar.gz
Size 61.9 kB
Tags Source
SHA-256 checksum
How to use checksums
3c1458b8190a4b8f43ead4515171c3de084c0149232054b626c8673faa325e8d
BLAKE2b-256 checksum
How to use checksums
9a6e1599f38ca1f577d1ef7d8ea0187e46529042f023f8b4f333f8a97be5325b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 1, 2026.

Transparency log

Release files / lbx-1.3.0-py3-none-any.whl

Download URL lbx-1.3.0-py3-none-any.whl
Size 26.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
7dc9174356025b9272d7dc406d713256654ca7f61462831e07e945ff6e134994
BLAKE2b-256 checksum
How to use checksums
edc460920d8f2dc7b9a3fa9e233798373bc7ff8f488eef827579396c8617d1f4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 1, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

1.3.0 This release

2 release files

1.2.0

2 release files

1.1.0

2 release files

1.0.1

2 release files

1.0.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page