Cryptography & Hashing Packages
Cryptographic primitives, hashing, and encryption libraries for securing data at rest and in transit across your application stack.
Packages in Cryptography & Hashing
Kind
Sort:Used by Most Apps
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
crypto-js
A JavaScript library of crypto standards - hashing, HMAC, PBKDF2, and symmetric ciphers for Node.js and the browser.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
forge
A native, pure-JavaScript implementation of TLS and PKI cryptography for building crypto-based Node.js and browser apps.
itsdangerous
A small Python toolkit for cryptographically signing data so you can trust it hasn't been tampered with when it comes back from an untrusted client.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
libsodium-wrappers
WebAssembly build of libsodium with hand-friendly JavaScript wrappers for encryption, signing, hashing, and key exchange.
noble-hashes
Audited, zero-dependency JS/TS implementation of SHA2, SHA3, BLAKE, HMAC, HKDF, PBKDF2, Scrypt and Argon2 that tree-shakes down to a few kilobytes per hash.
argon2-cffi
Secure, high-level password hashing for Python using Argon2
react-native-get-random-values
A native polyfill that implements crypto.getRandomValues() for React Native so libraries like uuid work without modification.
tweetnacl-js
A JavaScript port of the audited TweetNaCl cryptographic library, providing public-key and secret-key encryption, signing, and hashing for Node.js and browsers.
Lego
A Go ACME client and library for Let's Encrypt, with built-in support for 200+ DNS providers, usable as a CLI or embedded directly in your own code.
phpseclib
Pure-PHP implementations of SSH2, SFTP, X.509, RSA, AES, and dozens of other cryptographic primitives
ring
Safe, fast, small cryptographic primitives for Rust, built on verified assembly from BoringSSL
hash-wasm
Lightning-fast hash and password-derivation functions using hand-tuned WebAssembly binaries
JavaScript-MD5
A zero-dependency JavaScript MD5 and HMAC-MD5 hashing implementation that runs identically in Node.js, browsers, and AMD module loaders.
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
rsa
Pure Rust implementation of RSA encryption, signing, and key handling
Vault API
The official Go client library for HashiCorp Vault, providing typed access to secrets, auth methods, and system endpoints.
pycryptodome
A self-contained, low-level Python library of cryptographic primitives — ciphers, hashes, MACs, and public-key algorithms — with no OpenSSL dependency.
altcha
Privacy-first, self-hosted CAPTCHA replacement that proves a visitor is human with invisible proof-of-work instead of puzzles, tracking, or third-party APIs.
js-md5
A fast, dependency-free MD5 hash function for JavaScript with UTF-8 support
