Auth and security libraries for projects built with AI agents
Sessions, tokens, hashing, auth frameworks. 47 tools ranked by how many of 12,697 public projects built with AI coding agents use them, with downloads and GitHub stars. Updated Oct 10, 2026.
| Tool | Used in agent projects | Downloads / wk | GitHub stars | License |
|---|---|---|---|---|
| NextAuth.js npm Complete open-source authentication solution designed for Next.js applications. |
266 (2.1%) | 6.7M | 28.4K | ISC |
| bcryptjs npm Pure JavaScript bcrypt implementation for secure password hashing without dependencies. |
256 (2.0%) | 14.7M | 3,797 | BSD-3-Clause |
| jsonwebtoken npm Create, verify and decode JSON Web Tokens for authentication and secure data transmission. |
241 (1.9%) | 59.3M | 18.2K | MIT |
| cryptography pypi Python library providing cryptographic recipes and primitives for secure applications. |
213 (1.7%) | 281M | 7,803 | — |
| jose npm Comprehensive JWT and JWK handling for Node.js and web runtimes. |
141 (1.1%) | 151M | 7,824 | MIT |
| PyJWT pypi Python library for encoding and decoding JSON Web Tokens. |
128 (1.0%) | 154M | 5,714 | — |
| Better Auth npm Comprehensive authentication framework for TypeScript with multiple strategies. |
126 (1.0%) | 11.4M | 30.2K | MIT |
| Helmet npm Express middleware that sets HTTP security headers to prevent vulnerabilities. |
125 (1.0%) | 16.2M | 10.7K | MIT |
| Privy Auth npm React authentication SDK enabling Web2 and Web3 logins with embedded wallets. |
107 (0.8%) | 430K | — | Apache-2.0 |
| bcrypt (JavaScript) npm Password hashing library for secure credential storage in Node.js applications. |
103 (0.8%) | 6.3M | 7,807 | MIT |
| crypto-js npm JavaScript library implementing cryptographic standards for encryption and hashing. |
100 (0.8%) | 15.1M | 16.4K | MIT |
| DOMPurify npm Fast XSS sanitizer for HTML, MathML and SVG protecting against injection attacks. |
96 (0.8%) | 70.4M | 17.5K | (MPL-2.0 OR Apache-2.0) |
| MarkupSafe pypi Utility for safely escaping and marking HTML/XML strings to prevent injection attacks. |
91 (0.7%) | 178M | 698 | — |
| Clerk npm Modern authentication and user management SDK for Next.js and React. |
75 (0.6%) | 2.7M | 1,763 | MIT |
| passlib pypi Comprehensive password hashing framework supporting 30+ algorithms and schemes. |
70 (0.6%) | 7.4M | — | BSD |
| python-jose pypi JOSE (JSON Object Signing and Encryption) implementation for Python. |
70 (0.6%) | 7.7M | 1,761 | MIT |
| bcrypt (Python) pypi Modern password hashing library with secure bcrypt algorithm implementation. |
68 (0.5%) | 37.2M | 1,504 | Apache-2.0 |
| Passport.js npm Modular authentication middleware for Node.js supporting OAuth, JWT and local strategies. |
61 (0.5%) | 8.2M | 23.5K | MIT |
| PyNaCl pypi Python binding to NaCl cryptography library for secure encryption and signing. |
58 (0.5%) | 38.9M | 1,210 | Apache-2.0 |
| Auth.js Prisma Adapter npm Prisma ORM adapter for Auth.js enabling session and account storage integration. |
56 (0.4%) | 816K | 28.4K | ISC |
| @noble/hashes npm Audited zero-dependency JavaScript implementation of SHA, BLAKE, HMAC, HKDF, PBKDF. |
55 (0.4%) | 94.6M | 928 | MIT |
| express-session npm Session middleware for Express enabling user authentication and state management. |
54 (0.4%) | 4.3M | 6,352 | MIT |
| PyCryptodome pypi Self-contained cryptography library for Python with encryption, hashing and signing. |
51 (0.4%) | 17.4M | 3,273 | BSD, Public Domain |
| itsdangerous pypi Cryptographic signing utilities for safely passing data to untrusted environments. |
48 (0.4%) | 47.7M | 3,139 | — |
| @noble/curves npm Audited minimal JavaScript implementation of elliptic curve cryptography. |
46 (0.4%) | 33.1M | 960 | MIT |
| azure-identity pypi Microsoft Azure identity authentication library for Python. |
43 (0.3%) | 29.2M | 5,614 | — |
| pyasn1 pypi Pure Python implementation of ASN.1 types and DER/BER/CER codecs. |
43 (0.3%) | 102M | 53 | BSD-2-Clause |
| jwt-decode npm Decode JWT tokens in the browser without server verification for inspection. |
40 (0.3%) | 18.1M | 3,399 | MIT |
| google-auth-oauthlib pypi OAuth library for Google authentication flows in Python applications. |
40 (0.3%) | 27.5M | 5,405 | Apache 2.0 |
| passport-local npm Passport strategy for local username and password authentication. |
39 (0.3%) | 1.7M | 2,752 | — |
| isomorphic-dompurify npm Server and client-side HTML sanitization using DOMPurify. |
34 (0.3%) | 6.1M | 601 | MIT |
| ecdsa pypi Pure Python ECDSA cryptographic signature library. |
34 (0.3%) | 10.1M | 974 | MIT |
| argon2-cffi pypi Python binding for Argon2 password hashing algorithm. |
32 (0.3%) | 16.4M | 733 | — |
| @noble/ed25519 npm Fast, compact JavaScript implementation of Ed25519 signatures for cryptographic operations. |
30 (0.2%) | 3.3M | 522 | MIT |
| keyring pypi Python library for securely storing and retrieving passwords and secrets. |
29 (0.2%) | 36.5M | 1,514 | — |
| rsa pypi Pure Python RSA encryption and decryption implementation for secure communication. |
28 (0.2%) | 45.9M | 489 | Apache-2.0 |
| Authlib pypi Ultimate Python library for building OAuth and OpenID Connect servers and clients. |
27 (0.2%) | 28M | 5,430 | BSD-3-Clause |
| SlowAPI pypi Rate limiting extension for FastAPI and Starlette to protect APIs from abuse. |
27 (0.2%) | 5.5M | 2,068 | MIT |
| @auth/core npm Flexible authentication library for web applications with built-in provider integrations. |
26 (0.2%) | 4.9M | 28.4K | ISC |
| Azure Identity npm Credential implementations for Azure SDK to authenticate with Microsoft Entra ID. |
25 (0.2%) | 16.5M | 2,301 | MIT |
| NextAuth Prisma Adapter npm Prisma database adapter for NextAuth authentication framework. |
25 (0.2%) | 431K | 28.4K | ISC |
| defusedxml pypi Protects Python XML parsing from billion laughs and other XML bomb attacks. |
24 (0.2%) | 52.3M | 555 | PSFL |
| requests-oauthlib pypi OAuth authentication support for the Requests HTTP library. |
23 (0.2%) | 60M | 1,773 | ISC |
| js-sha256 npm Pure JavaScript implementation of SHA-256 hashing with UTF-8 encoding support for browsers and Node.js. |
22 (0.2%) | 5M | 976 | MIT |
| oauthlib pypi Comprehensive OAuth request-signing implementation for Python, handling authentication flows securely. |
22 (0.2%) | 57.3M | 2,984 | BSD-3-Clause |
| PyOTP pypi Generate and validate one-time passwords (OTP) for two-factor authentication. |
21 (0.2%) | 8.2M | 3,341 | — |
| otplib npm TypeScript library for generating and verifying TOTP and HOTP one-time passwords. |
20 (0.2%) | 3.7M | 2,294 | MIT |
Nothing here matches. Search all tools →
Other categories
Web frameworks UI components and icons Styling and CSS Animation and motion 3D and graphics Charts and data visualisation Forms, validation and schemas State and data fetching Markdown, editors and content Desktop and mobile apps Utilities Model SDKs Agent, MCP and tool libraries Prompts, structured output and evals ML and data science Databases, ORMs and clients SDKs for hosted services Jobs, queues and workflows Files, images and media Scraping, browsers and parsing HTTP servers and APIs HTTP clients and networking Testing Linting and formatting Languages, types and runtimes Build tools and bundlers Dev workflow and config Logging, monitoring and analytics Crypto and web3 Game development