#password #credential #keychain #keyring #cross-platform


Cross-platform library for managing passwords/credentials

17 releases (1 stable)

new 1.0.0 Nov 29, 2021
0.10.4 Nov 13, 2021
0.10.1 Oct 27, 2020
0.9.0 Apr 22, 2020
0.1.0 Feb 10, 2016

#2 in Authentication

Download history 1138/week @ 2021-08-15 2098/week @ 2021-08-22 2532/week @ 2021-08-29 1706/week @ 2021-09-05 2299/week @ 2021-09-12 2334/week @ 2021-09-19 2366/week @ 2021-09-26 1937/week @ 2021-10-03 2399/week @ 2021-10-10 2274/week @ 2021-10-17 1918/week @ 2021-10-24 1341/week @ 2021-10-31 1756/week @ 2021-11-07 1933/week @ 2021-11-14 1263/week @ 2021-11-21 1763/week @ 2021-11-28

6,837 downloads per month
Used in 27 crates (26 directly)


723 lines


CI Crates.io API Documentation on docs.rs

A cross-platform library to manage storage and retrieval of passwords (and other credential-like secrets) in the underlying platform secure store, with a fully-developed example that provides a command-line interface.

Published on crates.io


Currently supports Linux, macOS, and Windows. Please file issues if you have any problems or bugs!

To use this library in your project add the following to your Cargo.toml file:

keyring = "1"

This will give you access to the keyring crate in your code. Now you can use the Entry::new function to create a new keyring entry. The new function expects a service name and an username which together identify the entry.

Passwords can be added to an entry using its set_password method. They can then be read back using the get_password method, and deleted using the delete_password method. (The persistence of the Entry is determined via Rust rules, so deleting the password doesn't delete the entry, but it does delete the underlying platform credential which was used to store the password.)

extern crate keyring;

use std::error::Error;

fn main() -> Result<(), Box<dyn Error>> {
    let service = "my_application";
    let username = "my_name";
    let entry = keyring::Entry::new(&service, &username);

    let password = "topS3cr3tP4$$w0rd";

    let password = entry.get_password()?;
    println!("My password is '{}'", password);

    println!("My password has been deleted");



The get_password, set_password and delete_password functions return a Result which, if the operation was unsuccessful, can yield a keyring::Error with a platform-independent code that describes the error.


The keychain-rs project contains a sample application: a command-line interface to the keychain in cli.rs in the examples directory. This can be a great way to explore how the library is used, and it allows experimentation with the use of different service names, usernames, and targets. When run in "singly verbose" mode (-v), it outputs the retrieved credentials on each get run. When run in "doubly verbose" mode (-vv), it also outputs any errors returned. This can be a great way to see which errors result from which conditions on each platform.

Dev Notes

  • We build using GitHub CI.
  • Each tag is built on Ubuntu x64, Win 10 x64, and Mac intel x64. The cli example executable is posted for all platforms with the tag.


Licensed under either of

at your option.


Thanks to the following for helping make this library better, whether through contributing code, discussion, or bug reports!

  • @dario23
  • @dten
  • @jasikpark
  • @jonathanmorley
  • @lexxvir
  • @Phrohdoh
  • @Rukenshia
  • @samuela
  • @stankec
  • @steveatinfincia
  • @bhkaminski
  • @MaikKlein
  • @brotskydotcom


Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.


~24K SLoC