diff --git a/tools/cldr-apps/js/src/esm/cldrKeyboard.mjs b/tools/cldr-apps/js/src/esm/cldrKeyboard.mjs
new file mode 100644
index 00000000000..c5188177e1a
--- /dev/null
+++ b/tools/cldr-apps/js/src/esm/cldrKeyboard.mjs
@@ -0,0 +1,114 @@
+/**
+ * Operations around keyboard support
+ */
+
+import * as cldrClient from "./cldrClient.mjs";
+import * as cldrStatus from "./cldrStatus.mjs";
+
+// See https://keyman.com/developer/keymanweb/ for the latest version and scripts to use
+const KEYMAN_VERSION = "17.0.333";
+const KEYMAN_SCRIPTS = ["keymanweb.js", "kmwuitoggle.js"];
+const KEYMAN_BASE = "https://s.keyman.com/kmw/engine/";
+const KEYMAN_ATTACH = `(
+    function(kmw) {
+        kmw.init({attachType:'auto'});
+    }
+)(keyman);`;
+
+
+// are the scripts installed?
+let installed = false;
+let installing = false;
+// is the option enabled?
+let enabled = false;
+// did we call init yet?
+let initted = false;
+
+
+function getRemoteScript(src) {
+    const e = document.createElement('script');
+    e.setAttribute('src', src);
+    return e;
+}
+
+function getInlineScript(body) {
+    const e = document.createElement('script');
+    e.textContent = body;
+    return e;
+}
+
+/** insert the script tags */
+async function installKeyboards() {
+    if (installing) return;
+    installing = true;
+
+    if (!installed) {
+        const { body } = document;
+        for (const script of KEYMAN_SCRIPTS) {
+            const e = getRemoteScript(`${KEYMAN_BASE}${KEYMAN_VERSION}/${script}`);
+            body.appendChild(e);
+            await waitForLoad(e); // block here until loaded
+        }
+        const attach = getInlineScript(KEYMAN_ATTACH);
+        body.appendChild(attach);
+        installed = true;
+        installing = false;
+        updateKeyboardLocale(cldrStatus.getCurrentLocale());
+    }
+
+    function waitForLoad(e) {
+        return new Promise((resolve, reject) => {
+            try {
+                e.addEventListener('load', resolve);
+            } catch (err) {
+                reject(err);
+            }
+        });
+    }
+}
+
+/**
+ * Update whether user has requested web keyboards
+ * @param {boolean} enable  true if keyboards are enabled
+ */
+export function setUseKeyboards(enable) {
+    if (enable != enabled) {
+        if (enable) {
+            installKeyboards().then(() => { enabled = true; });
+        } else {
+            enabled = false;
+        }
+    }
+}
+
+/**
+ * Update the keyboard locale
+ * @param {string} curLocale
+ */
+export function updateKeyboardLocale(curLocale) {
+    if (installed && enabled) {
+        // make sure keyman is loaded
+        for (const { InternalName } of keyman.getKeyboards()) {
+            keyman.removeKeyboards(InternalName);
+            console.log(`Removed kbd: ${InternalName}`);
+        }
+        console.log(`Adding kbd: @${curLocale}`);
+        keyman.addKeyboards(`@${curLocale}`);
+        // end keyboards
+    }
+}
+
+export function isEnabled() {
+    return enabled;
+}
+
+/** Note: may need to call reload() in order to unload keyboard. */
+export async function setEnabledPref(enable) {
+    const client = await cldrClient.getClient();
+    setUseKeyboards(enable);
+    if (enable) {
+        await client.apis.user.setSetting({setting: 'webkeyboard'});
+    } else {
+        await client.apis.user.removeSetting({setting: 'webkeyboard'});
+    }
+}
diff --git a/tools/cldr-apps/js/src/esm/cldrMenu.mjs b/tools/cldr-apps/js/src/esm/cldrMenu.mjs
index 0a40a49f9da..3a10adeee3c 100644
--- a/tools/cldr-apps/js/src/esm/cldrMenu.mjs
+++ b/tools/cldr-apps/js/src/esm/cldrMenu.mjs
@@ -8,6 +8,7 @@ import * as cldrCoverage from "./cldrCoverage.mjs";
 import * as cldrDom from "./cldrDom.mjs";
 import * as cldrEvent from "./cldrEvent.mjs";
 import * as cldrGui from "./cldrGui.mjs";
+import * as cldrKeyboard from "./cldrKeyboard.mjs";
 import * as cldrLoad from "./cldrLoad.mjs";
 import { LocaleMap } from "./cldrLocaleMap.mjs";
 import * as cldrStatus from "./cldrStatus.mjs";
@@ -418,6 +419,8 @@ function updateLocaleMenu() {
   const curLocale = cldrStatus.getCurrentLocale();
   let prefixMessage = "";
   if (curLocale != null && curLocale != "" && curLocale != "-") {
+    // hook to update the keyboard locale
+    cldrKeyboard.updateKeyboardLocale(curLocale);
     const locmap = cldrLoad.getTheLocaleMap();
     cldrStatus.setCurrentLocaleName(locmap.getLocaleName(curLocale));
     var bund = locmap.getLocaleInfo(curLocale);
diff --git a/tools/cldr-apps/js/src/esm/cldrStatus.mjs b/tools/cldr-apps/js/src/esm/cldrStatus.mjs
index 862b875c6ec..5c30742b0d9 100644
--- a/tools/cldr-apps/js/src/esm/cldrStatus.mjs
+++ b/tools/cldr-apps/js/src/esm/cldrStatus.mjs
@@ -3,6 +3,7 @@
  */
 import * as cldrGui from "./cldrGui.mjs";
 import { ref } from "vue";
+import { setUseKeyboards } from "./cldrKeyboard.mjs";
 
 const refs = {
   currentLocale: ref(null),
@@ -44,6 +45,7 @@ function getStatusTarget() {
  * Events:
  * - sessionId:  session ID changed
  * - surveyUser: survey user changed
+ * - update: any update changed
  */
 function on(type, callback) {
   getStatusTarget().addEventListener(type, callback);
@@ -94,6 +96,8 @@ function updateAll(status) {
   if (status.user) {
     setSurveyUser(status.user);
   }
+  setUseKeyboards(status?.settings?.user?.webkeyboard);
+  dispatchEvent(new Event('update'));
 }
 
 /**
diff --git a/tools/cldr-apps/js/src/views/MainMenu.vue b/tools/cldr-apps/js/src/views/MainMenu.vue
index ba2fe275e20..bd6864d7b86 100644
--- a/tools/cldr-apps/js/src/views/MainMenu.vue
+++ b/tools/cldr-apps/js/src/views/MainMenu.vue
@@ -134,11 +134,15 @@
         <li><a href="#error_subtypes///">Error Subtypes</a></li>
       </ul>
     </li>
+    <li v-if="loggedIn">
+      <a-checkbox v-model:checked="webkeyboard" @change="setKeyboard">Show Web Keyboard</a-checkbox>
+    </li>
   </ul>
 </template>
 
 <script>
 import * as cldrStatus from "../esm/cldrStatus.mjs";
+import * as cldrKeyboard from "../esm/cldrKeyboard.mjs";
 
 export default {
   data() {
@@ -158,6 +162,7 @@ export default {
       uploadXmlUrl: null,
       userId: 0,
       showClaMenu: true,
+      webkeyboard: false,
     };
   },
 
@@ -187,6 +192,12 @@ export default {
       this.org = cldrStatus.getOrganizationName();
       this.recentActivityUrl = this.getSpecialUrl("recent_activity");
       this.uploadXmlUrl = this.getSpecialUrl("upload");
+      cldrStatus.on('update', () => this.webkeyboard = cldrKeyboard.isEnabled());
+    },
+
+    setKeyboard(checked) {
+      cldrKeyboard.setEnabledPref(this.webkeyboard);
+      // window.location.reload();
     },
 
     getSpecialUrl(special) {
diff --git a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/CookieSession.java b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/CookieSession.java
index 4241f9eddbe..43082267c97 100644
--- a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/CookieSession.java
+++ b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/CookieSession.java
@@ -22,6 +22,8 @@
 import java.util.Set;
 import java.util.TreeSet;
 import java.util.logging.Logger;
+import org.json.JSONException;
+import org.json.JSONObject;
 import org.unicode.cldr.util.CLDRConfig;
 import org.unicode.cldr.util.Level;
 import org.unicode.cldr.util.StandardCodes;
@@ -937,4 +939,16 @@ public String getMessage() {
     public void setMessage(String s) {
         sessionMessage = s;
     }
+
+    /* get any extra settings for the client as a JSONObject, or null */
+    public JSONObject getSettingsJSON() throws JSONException {
+        // right now, only user settings, but could expose others
+        if (user == null) return null;
+        final JSONObject userSettings = user.settings().getClientJSON();
+        if (userSettings != null) {
+            return new JSONObject().put("user", userSettings);
+        } else {
+            return null;
+        }
+    }
 }
diff --git a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/SurveyMain.java b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/SurveyMain.java
index 339d9cc876d..8a6dbc8f14f 100644
--- a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/SurveyMain.java
+++ b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/SurveyMain.java
@@ -3697,6 +3697,7 @@ private class StatusForFrontEnd implements JSONString {
         private User user = null;
         private final int users = CookieSession.getUserCount();
         private String sessionMessage = null;
+        private JSONObject settings = null;
 
         private final Runtime r = Runtime.getRuntime();
         double memtotal = r.totalMemory() / 1024000.0;
@@ -3708,31 +3709,36 @@ private JSONObject toJSONObject() throws JSONException {
              * Doc for JSONObject.put(string, object), says: "It [object] should be of one of these types:
              * Boolean, Double, Integer, JSONArray, JSONObject, Long, String, or the JSONObject.NULL object."
              */
-            return new JSONObject()
-                    .put("contextPath", contextPath)
-                    .put("dbopen", dbopen)
-                    .put("dbused", dbused)
-                    .put("observers", observers)
-                    .put("isBusted", isBusted)
-                    .put("isPhaseBeta", isPhaseBeta)
-                    .put("isSetup", isSetup)
-                    .put("isUnofficial", isUnofficial)
-                    .put("newVersion", newVersion)
-                    .put("organizationName", organizationName)
-                    .put("pages", pages)
-                    .put("permissions", permissions)
-                    .put("phase", phase)
-                    .put("extendedPhase", extendedPhase)
-                    .put("sessionId", sessionId)
-                    .put("sessionMessage", sessionMessage)
-                    .put("specialHeader", specialHeader)
-                    .put("surveyRunningStamp", surveyRunningStamp)
-                    .put("sysload", sysload)
-                    .put("memtotal", memtotal)
-                    .put("memfree", memfree)
-                    .put("uptime", uptime)
-                    .put("user", user) // allowed since User implements JSONString?
-                    .put("users", users);
+            final JSONObject j =
+                    new JSONObject()
+                            .put("contextPath", contextPath)
+                            .put("dbopen", dbopen)
+                            .put("dbused", dbused)
+                            .put("observers", observers)
+                            .put("isBusted", isBusted)
+                            .put("isPhaseBeta", isPhaseBeta)
+                            .put("isSetup", isSetup)
+                            .put("isUnofficial", isUnofficial)
+                            .put("newVersion", newVersion)
+                            .put("organizationName", organizationName)
+                            .put("pages", pages)
+                            .put("permissions", permissions)
+                            .put("phase", phase)
+                            .put("extendedPhase", extendedPhase)
+                            .put("sessionId", sessionId)
+                            .put("sessionMessage", sessionMessage)
+                            .put("specialHeader", specialHeader)
+                            .put("surveyRunningStamp", surveyRunningStamp)
+                            .put("sysload", sysload)
+                            .put("memtotal", memtotal)
+                            .put("memfree", memfree)
+                            .put("uptime", uptime)
+                            .put("user", user) // allowed since User implements JSONString?
+                            .put("users", users);
+            if (settings != null) {
+                j.put("settings", settings);
+            }
+            return j;
         }
 
         @Override
@@ -3767,6 +3773,11 @@ private void setSessionIdAndUser(HttpServletRequest request) {
                 sessionId = mySession.id;
                 user = mySession.user;
                 sessionMessage = mySession.getMessage();
+                try {
+                    settings = mySession.getSettingsJSON();
+                } catch (JSONException j) {
+                    SurveyLog.logException(logger, j, "getting user session for " + sessionId);
+                }
             }
         }
     }
diff --git a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/UserSettings.java b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/UserSettings.java
index 79a4a2c4026..dc2786a88ea 100644
--- a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/UserSettings.java
+++ b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/UserSettings.java
@@ -4,6 +4,8 @@
 
 import com.google.gson.Gson;
 import com.google.gson.GsonBuilder;
+import org.json.JSONException;
+import org.json.JSONObject;
 
 public abstract class UserSettings implements Comparable<UserSettings> {
     /**
@@ -103,4 +105,25 @@ public <T> T getJson(String name, Class<T> clazz) {
         if (j == null || j.isBlank()) return null;
         return gson.fromJson(j, clazz);
     }
+
+    // enum with the names of client visible settings
+    public enum ClientVisibleSettings {
+        // enable a web keyboard (Keyman)
+        webkeyboard,
+    };
+
+    public JSONObject getClientJSON() throws JSONException {
+        JSONObject j = new JSONObject();
+        for (final ClientVisibleSettings s : ClientVisibleSettings.values()) {
+            final String v = get(s.name(), null);
+            if (v != null) {
+                j.put(s.name(), v);
+            }
+        }
+        if (j.length() > 0) {
+            return j;
+        } else {
+            return null;
+        }
+    }
 }
diff --git a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/api/UserAPI.java b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/api/UserAPI.java
index df03496ada7..6b303ab2f39 100644
--- a/tools/cldr-apps/src/main/java/org/unicode/cldr/web/api/UserAPI.java
+++ b/tools/cldr-apps/src/main/java/org/unicode/cldr/web/api/UserAPI.java
@@ -10,6 +10,7 @@
 import javax.ws.rs.Produces;
 import javax.ws.rs.core.MediaType;
 import javax.ws.rs.core.Response;
+import org.apache.ibatis.annotations.DeleteProvider;
 import org.eclipse.microprofile.openapi.annotations.Operation;
 import org.eclipse.microprofile.openapi.annotations.media.Content;
 import org.eclipse.microprofile.openapi.annotations.media.Schema;
@@ -22,6 +23,7 @@
 import org.unicode.cldr.web.CookieSession;
 import org.unicode.cldr.web.UserRegistry;
 import org.unicode.cldr.web.UserRegistry.User;
+import org.unicode.cldr.web.UserSettings;
 
 @Path("/users")
 @Tag(name = "user", description = "APIs for user management")
@@ -171,4 +173,58 @@ public Response getCla(@HeaderParam(Auth.SESSION_HEADER) String session) {
         }
         return Response.ok(cla).build();
     }
+
+    @PUT
+    @Operation(summary = "Update Settings", description = "set a settings field")
+    @APIResponses(
+            value = {
+                @APIResponse(responseCode = "202", description = "Set OK"),
+                @APIResponse(responseCode = "401", description = "Unauthorized"),
+                @APIResponse(responseCode = "406", description = "Parameter error"),
+            })
+    @Path("/settings/{setting}/true")
+    public Response setSetting(
+            @HeaderParam(Auth.SESSION_HEADER) String session,
+            @PathParam("setting") String setting) {
+        final CookieSession mySession = Auth.getSession(session);
+        if (mySession == null || mySession.user == null) {
+            return Response.status(401).build();
+        }
+
+        try {
+            final UserSettings.ClientVisibleSettings settingEnum =
+                    UserSettings.ClientVisibleSettings.valueOf(setting);
+            mySession.user.settings().set(settingEnum.name(), true);
+            return Response.status(202, "ok").build();
+        } catch (Throwable t) {
+            return Response.status(406).build();
+        }
+    }
+
+    @DELETE
+    @Operation(summary = "Remove Settings", description = "remove a settings field")
+    @APIResponses(
+            value = {
+                @APIResponse(responseCode = "202", description = "Set OK"),
+                @APIResponse(responseCode = "401", description = "Unauthorized"),
+                @APIResponse(responseCode = "406", description = "Parameter error"),
+            })
+    @Path("/settings/{setting}")
+    public Response removeSetting(
+            @HeaderParam(Auth.SESSION_HEADER) String session,
+            @PathParam("setting") String setting) {
+        final CookieSession mySession = Auth.getSession(session);
+        if (mySession == null || mySession.user == null) {
+            return Response.status(401).build();
+        }
+
+        try {
+            final UserSettings.ClientVisibleSettings settingEnum =
+                    UserSettings.ClientVisibleSettings.valueOf(setting);
+            mySession.user.settings().set(settingEnum.name(), false);
+            return Response.status(202, "ok").build();
+        } catch (Throwable t) {
+            return Response.status(406).build();
+        }
+    }
 }