Byoky: open-source wallet keeps AI API keys encrypted on the user's device
RESEARCHAndroidredteam/daily · 1 source
- Severity
- Info
- Sources
- 1
What happened
Byoky is an open-source wallet for AI provider API keys (OpenAI, Anthropic, Google Gemini and others), distributed as Chrome and Firefox extensions and iOS and Android apps. The design keeps keys encrypted at rest on the device and proxies provider requests, so requesting apps receive a session token rather than the raw key. The article is truncated and gives no CVEs, versions or independent security assessment, so the design should be verified against the project's source before relying on it.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security