lbx - Lock Box
A lightweight secret storage vault with CLI and Python API. Stores secrets in encrypted files with master password secured via OS keychain.
Features
- Secure Encryption: AES-256 encryption with master password protection
- Cross-Platform: Works on Windows, macOS, and Linux
- Dual Interface: Both CLI and Python API available
- Keychain Integration: Master password stored securely in OS keychain
- Simple Workflow: Intuitive commands for daily use
- Minimal Dependencies: Lightweight and secure
Installation
pipx install lbx
For additional installation methods, see the Installation Guide.
Quick Start
CLI Usage
# Create a new vault
lbx vault init
# Add a secret
lbx secret add github token --value ghp_xxxxxx
# Retrieve a secret
lbx secret get github token
# Update a secret
printf "new-value" | lbx secret update github token
# List services and secrets
lbx service list
lbx secret list
lbx secret list --service github
# Rename or move secrets
lbx secret rename github token api_key
lbx secret move github api_key gitlab
# Lock or delete the vault
lbx vault lock
lbx vault delete
Python API
from lbx import Lbx
vault = Lbx()
vault.add_secret("github", "token", "value")
entry = vault.get_secret("github", "token")
print(entry.value)
vault.list_services()
vault.list_secrets()
For complete examples and tutorials, see the Quick Start Guide.
Use Cases
- Development Teams: Store API keys, database credentials, and service tokens securely
- DevOps & CI/CD: Manage secrets in deployment pipelines and infrastructure automation
- Personal Projects: Keep sensitive configuration data encrypted and organized
- Security-Conscious Users: Replace plain-text config files with encrypted secret storage
Documentation
Complete documentation is available at: https://jd-35656.github.io/lbx/latest/
- Installation Guide - Detailed installation instructions
- Quick Start - Get started in minutes
- CLI Reference - Complete command documentation
- API Reference - Python API documentation
- Contributing - How to contribute
Requirements
- Python 3.10 or higher
- Windows, macOS, or Linux
- OS keychain support (automatic)
Contributing
Contributions are welcome! Please read the Contributing Guide for details on our development process, coding standards, and how to submit pull requests.
License
MIT License - see LICENSE file for details.
Support
- Documentation: https://jd-35656.github.io/lbx/latest/
- PyPI Package: pypi.org/project/lbx
- Bug Reports: GitHub Issues
- Discussions: GitHub Discussions
© 2025 Jitesh Sahani (JD)
📧 jitesh.sahani@outlook.com
"Your secrets are safe, your mind at peace."
🐺 Crafted by a dreamer, for dreamers 🐺
Metadata
Release files for lbx 1.3.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| lbx-1.3.0.tar.gz | 61.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| lbx-1.3.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 88.1 kB
Release files / lbx-1.3.0.tar.gz
| Download URL | lbx-1.3.0.tar.gz |
|---|---|
| Size | 61.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
3c1458b8190a4b8f43ead4515171c3de084c0149232054b626c8673faa325e8d
|
|
BLAKE2b-256 checksum How to use checksums |
9a6e1599f38ca1f577d1ef7d8ea0187e46529042f023f8b4f333f8a97be5325b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 1, 2026.
Transparency logRelease files / lbx-1.3.0-py3-none-any.whl
| Download URL | lbx-1.3.0-py3-none-any.whl |
|---|---|
| Size | 26.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
7dc9174356025b9272d7dc406d713256654ca7f61462831e07e945ff6e134994
|
|
BLAKE2b-256 checksum How to use checksums |
edc460920d8f2dc7b9a3fa9e233798373bc7ff8f488eef827579396c8617d1f4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 1, 2026.
Transparency log