Search tools, frameworks, libraries, categories and domains
Easy-to-use, hard-to-misuse modern crypto library (NaCl fork) with bindings for most languages.
Other tools in the same categories.
openssl/openssl
Ubiquitous TLS and cryptography toolkit underpinning most HTTPS on the internet.
helmetjs/helmet
Express middleware that sets secure HTTP headers like CSP, HSTS and X-Frame-Options in one line.
cure53/DOMPurify
Fast, battle-tested HTML sanitizer that prevents XSS when rendering untrusted HTML.
panva/jose
Dependency-free JWT, JWS, JWE and JWK library that works in every JavaScript runtime.
kelektiv/node.bcrypt.js
Native Node.js bcrypt binding for password hashing; still common, though argon2id is now preferred.
ranisalt/node-argon2
Node.js bindings for Argon2, the OWASP-recommended password hashing algorithm (argon2id).
pyca/cryptography
Python's standard package for cryptographic recipes and primitives, built on OpenSSL and Rust.
MasterKale/SimpleWebAuthn
TypeScript server and browser libraries that make adding passkeys (WebAuthn) straightforward.
rustls/rustls
Memory-safe modern TLS library in Rust, increasingly used as an OpenSSL replacement.