passlib

passlib is a Python library focused on password hashing, supporting multiple algorithms like bcrypt, scrypt, and argon2. It provides a unified interface for encrypting, verifying, and migrating passwords, making it ideal for secure authentication systems. Compatible with both Python 2 and 3, passlib also includes support for legacy Unix password formats.

Official Website Github Website

Resource Introduction

Related Resources

cryptography

cryptography is a Python library that provides modern cryptographic functionalities, including symmetric encryption, asymmetric encryption, hashing, and digital signatures. It offers both high-level and low-level APIs to suit various security development needs. Built on secure backends like OpenSSL, it ensures cross-platform compatibility and robustness.

hashlib

hashlib is a built-in Python module for computing hash values using algorithms like MD5, SHA-1, and SHA-256. It is used for generating data fingerprints, verifying file integrity, and basic password hashing. While not recommended for direct password storage (use stronger methods), it's simple and cross-platform, commonly used in log validation, cache control, and basic data verification.

ssl

The ssl module is a built-in Python module that supports the SSL/TLS protocols for secure network communication. It adds a security layer to socket connections, supporting certificate verification, client authentication, and encrypted transmission. Developers can use ssl to build HTTPS servers or clients, ensuring secure data transfer over networks.

PyNaCl

PyNaCl is a Python binding to the NaCl encryption library designed by Daniel J. Bernstein, offering high-performance and easy-to-use cryptographic functions such as public-key encryption, signing, and symmetric encryption. Designed with security and simplicity in mind, it avoids common cryptographic pitfalls. Suitable for secure messaging, data protection, and authentication systems requiring strong security.

bcrypt

bcrypt is a Python library specifically designed for securely hashing and storing passwords. Based on the Blowfish algorithm with built-in salt generation, it effectively resists rainbow table and brute-force attacks. Compared to regular hash functions, bcrypt uses higher computational cost to enhance security. Widely used in user authentication systems and backend web applications requiring secure password handling.