PyLocket

Protect, license, and sell your Python apps, without ever shipping your source or your keys.

PyLocket is the developer platform for shipping commercial Python desktop apps. It wraps your build in strong anti-reverse-engineering protection, issues and enforces per-device license keys, and delivers signed, ready-to-run downloads to your customers. No source rewrites. No percentage fees.

Protect a build in three lines:

pip install pylocket
pylocket login --sso
pylocket protect --app <APP_ID> --artifact dist/myapp.exe --out ./protected/

Why PyLocket

Most "protection" tools encrypt your .py files and decrypt them back to your original source at import time. That means the key ships inside your app, and the original code is recoverable. Public one-click decryptors exist for that entire category.

PyLocket is built differently.

1. Unrecoverable by design

Your code is encrypted at the function level, and the keys are issued to each licensed device at activation. They are never embedded in your app. Decrypted code runs inside a hardened native runtime and is never written back to disk as source. There is no one-click PyLocket decryptor, and architecturally there cannot be one.

2. A platform, not a file utility

Protection is step one. PyLocket also gives you license keys with per-device activation limits and revocation, and branded one-time download links from the CLI, plus free-trial links, one-click push updates to your users, and hosted checkout in the Developer Portal. One platform replaces your obfuscator, your license server, and your storefront.

3. Trusted, not flagged

Every PyLocket developer is identity-verified, and every build is code-signed (Windows Authenticode, macOS notarization, Linux GPG) and malware-scanned. Anonymous encryptors are exactly what malware authors abuse, which is why antivirus engines flag them. PyLocket apps carry a real identity and a real signature, so your users see trusted, not quarantined.

PyLocket does not claim to be unbreakable. Nothing is. The goal is to make reverse-engineering economically impractical: months of expert effort, not an afternoon.

Licensing and distribution

pylocket is a full license and delivery client, not just an obfuscator:

• List, revoke, and reset license keys (pylocket licenses ...)
• Issue license keys (pylocket licenses create) — each license records the per-license fee on your next invoice, so the command confirms first; --yes skips the prompt in CI. Extending an expiry (pylocket licenses extend) requires an active Pro subscription
• Bind each license to a device limit you control
• Generate one-time, branded download links (pylocket distribute)
• Replace a protected build with your own code-signed copy while preserving notarization (pylocket replace-signed)
• Wire build events into your own systems with webhooks (pylocket webhook ...)

Quick start

# Authenticate via browser (recommended for 2FA and password-manager users)
pylocket login --sso

# Or authenticate with email and password
pylocket login

# List your apps
pylocket apps list

# Protect a build (PyInstaller, cx_Freeze, Briefcase, wheel, .app, and more)
pylocket protect --app <APP_ID> --artifact dist/myapp.exe --out ./protected/

# Check build status
pylocket status --build <BUILD_ID>

# Download the protected artifact
pylocket fetch --build <BUILD_ID> --out ./protected/

Commands

Run pylocket <command> --help for full options.

Supported builds

Packaging: PyInstaller (onefile and onedir), cx_Freeze, BeeWare Briefcase, Python wheels (.whl), raw scripts, ZIP archives, and macOS .app bundles.

Platforms: Windows x64, Linux x64, Linux arm64, macOS Intel, macOS Apple Silicon.

Python: 3.12, 3.13, and 3.14. PyLocket targets modern Python; the hardened runtime requires a current CPython.

PyLocket vs source encryptors

See the full comparison at pylocket.com.

Documentation and support

• Docs: docs.pylocket.com
• Developer Portal: portal.pylocket.com
• Email: support@pylocket.com