Flask-Security
Quickly add security features to your Flask application.
Notes on this repo
As of 7/30/2024, the independent fork Flask-Security-Too replaced the archived Flask-Security repo (now called Flask-Security-3.0). This repo is published at PyPI at both Flask-Security and Flask-Security-Too. Please consider changing your requirements file to point to flask-security.
Flask-Security-Too was a fork from the 3.0.0 version of the Original
Pallets Community Ecosystem
This project is part of the Pallets Community Ecosystem. Pallets is the open source organization that maintains Flask; Pallets-Eco enables community maintenance of related projects. If you are interested in helping maintain this project, please reach out on the Pallets Discord server <https://discord.gg/pallets>.
Goals
Use OWASP to guide best practice and default configurations.
Be more opinionated and ‘batteries’ included by reducing reliance on abandoned projects and bundling in support for common use cases.
Follow the Pallets lead on supported versions, documentation standards and any other guidelines for extensions that they come up with.
- Continue to add newer authentication/authorization standards:
Support for Refresh Tokens (5.9)
Support username recovery and changing username (5.6)
Support for changing email (5.5)
‘Social Login (OAuth)’ integrated (using authlib) (5.1)
WebAuthn/Passkey support (5.0)
Two-Factor recovery codes (5.0)
First-class support for username as identity (4.1)
Support for freshness decorator to ensure sensitive operations have new authentication (4.0)
Support for email normalization and validation (4.0)
Unified signin (username, phone, passwordless) feature (3.4)
Two/Multi-Factor authentication supporting SMS, email, authenticator apps (4.0)
Contributing
Issues and pull requests are welcome. Other maintainers are also welcome. Please consult these contributing guidelines.
Installing
Install and update using pip:
pip install -U Flask-Security
Resources
Metadata
Release files for Flask-Security 5.9.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| flask_security-5.9.2.tar.gz | 790.6 kB | With provenance | Details for flask_security-5.9.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| flask_security-5.9.2-py3-none-any.whl | Python 3 | none | any | Details for flask_security-5.9.2-py3-none-any.whl |
Total release size: 1.3 MB
Release files / flask_security-5.9.2.tar.gz
| Download URL | flask_security-5.9.2.tar.gz |
|---|---|
| Size | 790.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
215b1f978c203c646cfa87667e4a193b63aaf51a18403c49eccc9ff1b1bfad8f
|
|
BLAKE2b-256 checksum How to use checksums |
fc2228f308c4488b80924c55a39af15f7528d3ef0354c4cd100d2f8b86105c7e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logRelease files / flask_security-5.9.2-py3-none-any.whl
| Download URL | flask_security-5.9.2-py3-none-any.whl |
|---|---|
| Size | 515.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d46dfcc3ae89caab159a2685cb4ec8d9625c98cf36a110d3d3548b6211c2dfdf
|
|
BLAKE2b-256 checksum How to use checksums |
3807434026f2ab22328cd593818df534bc1d87c4baa949d26e48d17f4cebb342
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logSecurity for Flask-Security 5.9.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for flask_security-5.9.2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
