Crypto & web security libraries

OpenSSL

openssl/openssl

Popular

Ubiquitous TLS and cryptography toolkit underpinning most HTTPS on the internet.

Helmet

helmetjs/helmet

Popular

Express middleware that sets secure HTTP headers like CSP, HSTS and X-Frame-Options in one line.

DOMPurify

cure53/DOMPurify

Popular

Fast, battle-tested HTML sanitizer that prevents XSS when rendering untrusted HTML.

bcrypt

kelektiv/node.bcrypt.js

Popular

Native Node.js bcrypt binding for password hashing; still common, though argon2id is now preferred.

argon2

ranisalt/node-argon2

Node.js bindings for Argon2, the OWASP-recommended password hashing algorithm (argon2id).

libsodium

jedisct1/libsodium

Popular

Easy-to-use, hard-to-misuse modern crypto library (NaCl fork) with bindings for most languages.

PyCA cryptography

pyca/cryptography

Popular

Python's standard package for cryptographic recipes and primitives, built on OpenSSL and Rust.

SimpleWebAuthn

MasterKale/SimpleWebAuthn

Trending (detected automatically)Rising

TypeScript server and browser libraries that make adding passkeys (WebAuthn) straightforward.

rustls

rustls/rustls

Rising

Memory-safe modern TLS library in Rust, increasingly used as an OpenSSL replacement.

jose

panva/jose

Dependency-free JWT, JWS, JWE and JWK library that works in every JavaScript runtime.

Bouncy Castle

bcgit/bc-java

Comprehensive cryptography APIs for Java and C#, including FIPS and post-quantum algorithms.

forge

digitalbazaar/forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

s2n-tls

aws/s2n-tls

Trending (detected automatically)

An implementation of the TLS/SSL protocols