Passlib is a password hashing library for Python 2 & 3, which provides cross-platform implementations of over 30 password hashing algorithms, as well as a framework for managing existing password hashes. It's designed to be useful for a wide range of tasks, from verifying a hash found in /etc/shadow, to providing full-strength password hashing for multi-user application.

• See the documentation for details, installation instructions, and examples.
• See the changelog for a description of what's new in Passlib.
• Visit PyPI for the latest stable release. All releases are signed with the gpg key 4D8592DF4CE1ED31.
• Additional questions about usage or features? Feel free to post on our mailing list.

A quick example of using passlib to integrate into a new application:

>>> # import the context under an app-specific name (so it can easily be replaced later)
>>> from passlib.apps import custom_app_context as pwd_context

>>> # encrypting a password...
>>> hash = pwd_context.hash("somepass")
>>> hash
'$6$rounds=36122$kzMjVFTjgSVuPoS.$zx2RoZ2TYRHoKn71Y60MFmyqNPxbNnTZdwYD8y2atgoRIp923WJSbcbQc6Af3osdW96MRfwb5Hk7FymOM6D7J1'

>>> # verifying a password...
>>> ok = pwd_context.verify("somepass", hash)
True
>>> ok = pwd_context.verify("letmein", hash)
False

For more details and an extended set of examples, see the full documentation; This example barely touches on the range of features available.

• Homepage - https://bitbucket.org/ecollins/passlib
• Documentation - https://passlib.readthedocs.io
• Mailing list - https://groups.google.com/group/passlib-users
• Downloads - https://pypi.python.org/pypi/passlib
• Source - https://bitbucket.org/ecollins/passlib/src
• Issues - https://bitbucket.org/ecollins/passlib/issues
• Roadmap - https://bitbucket.org/ecollins/passlib/wiki/Roadmap

Passlib's source repository uses Mercurial. When building Passlib from an hg clone, note that there are two main branches: default and stable.

• default is the bleeding edge of the next major release. It may sometimes be of alpha quality.
• stable is the latest released version plus any pending bugfixes, and should be safe to use in production.