Lanyard.The Local BYOK Vault.
A secure, open-source Bring Your Own Key manager and OS Keyring bridge. Seamlessly request API keys and environment variables in your Python apps without ever touching the user's disk.
Build trust with your users.
Build securely.
Managing user API keys and cryptographic pairs is a liability. Lanyard solves this by acting as a local "OAuth" flow for desktop applications. When your application needs a key, Lanyard handles the secure storage, the user consent, and the decryption.
OS-Level Security
Keys are encrypted using PBKDF2HMAC and Fernet, then stored directly in the native OS Keychain. Your app never saves plain-text keys to disk.
Zero-Dependency SDK
The Lanyard Python SDK is built entirely on the Python Standard Library. No dependency bloat, no version conflicts. Just pip install lanyard.
Context-Aware UI
Users retain total control. Lanyard prompts the user for a Master PIN and asks for explicit approval before handing data over to your app.
Drop-in integration in
under 10 lines.
Integrating Lanyard into your Python application takes minutes. Just request a link, save the returned UUID, and fetch the secret on subsequent boots.
Request Access
Prompt the Lanyard UI drop-down menu so the user can select the key they want to share.
Save the UUID
Save the secure Lanyard ID to your app's local settings.
Fetch Silently
Fetch the decrypted key directly into memory whenever your app boots.
from lanyard import LanyardClient # Initialize with your app's name client = LanyardClient(app_name="My Awesome App") # 1. Prompt the user to select an API key response = client.request_link( reason="Required for OpenAI features", category="api_key" ) lanyard_uuid = response["target_id"] # 2. Fetch the key silently on next boot api_key = client.get_field(lanyard_uuid, "Private/Secret Key")
A vault for your
most sensitive data.
Lanyard isn't just a developer tool—it's a fully featured desktop vault. Built with a sleek, modern interface, users can easily manage their API Keys, Software Licenses, Cryptographic Pairs, and Environment files.
Master PIN Protection
The vault is locked behind a secure Master PIN, protecting data even if the physical device is compromised.
Approval Modals
When an app requests data, Lanyard wakes up and tells you exactly who is asking and what they want. You can approve once, or select "Always Allow".
Categorized Organization
Easily group keys into Projects for clean workspace management and siloed security contexts.
Access Request
"My Awesome App" is requesting data
This application is requesting access to a stored API Key.
Built in the open.
Free forever.
Security thrives in the light. Lanyard is entirely free and open source. Whether you want to audit the cryptography, contribute to the UI, or just poke around the codebase, you have full access.
Ready to integrate?
Download the Lanyard desktop daemon and install the Python SDK today via PyPI.
pip install lanyard