Skip to main content

Modern password hashing for Python

Project description

pwdlib

Modern password hashing for Python

build codecov PyPI version Downloads

Subscribe


Documentation: https://frankie567.github.io/pwdlib/

Source Code: https://github.com/frankie567/pwdlib


Quickstart

pip install 'pwdlib[argon2]'
from pwdlib import PasswordHash

password_hash = PasswordHash.recommended()
hash = password_hash.hash("herminetincture")
password_hash.verify("herminetincture", hash)  # True

Why pwdlib?

For years, the de-facto standard to hash passwords was passlib. Unfortunately, it has not been very active recently and its maintenance status is under question. Starting Python 3.13, passlib won't work anymore.

That's why I decided to start pwdlib, a password hash helper for the modern Python era. However, it's not designed to be a complete replacement for passlib, which supports numerous hashing algorithms and features.

✅ Goals

  • Provide an easy-to-use wrapper to hash and verify passwords
  • Support modern and secure algorithms like Argon2 or Bcrypt

❌ Non-goals

  • Support legacy hashing algorithms like MD5
  • Implement algorithms directly — we should only rely on existing and battle-tested implementations

Development

Setup environment

We use Hatch to manage the development environment and production build. Ensure it's installed on your system.

Run unit tests

You can run all the tests with:

hatch run test

Format the code

Execute the following command to apply linting and check typing:

hatch run lint

Publish a new version

You can bump the version, create a commit and associated tag with one command:

hatch version patch
hatch version minor
hatch version major

Your default Git text editor will open so you can add information about the release.

When you push the tag on GitHub, the workflow will automatically publish it on PyPi and a GitHub release will be created as draft.

Serve the documentation

You can serve the Mkdocs documentation with:

hatch run docs-serve

It'll automatically watch for changes in your code.

License

This project is licensed under the terms of the MIT license.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

pwdlib-0.2.0.tar.gz (11.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

pwdlib-0.2.0-py3-none-any.whl (8.1 kB view details)

Uploaded Python 3

File details

Details for the file pwdlib-0.2.0.tar.gz.

File metadata

  • Download URL: pwdlib-0.2.0.tar.gz
  • Upload date:
  • Size: 11.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: python-httpx/0.27.0

File hashes

Hashes for pwdlib-0.2.0.tar.gz
Algorithm Hash digest
SHA256 b1bdafc064310eb6d3d07144a210267063ab4f45ac73a97be948e6589f74e861
MD5 ca15fed69254c4f5444b02e37224df19
BLAKE2b-256 d165ab2cd5ba3c46b3aeed6dd45f414ad475680e9446254f536a3532f6c8662e

See more details on using hashes here.

File details

Details for the file pwdlib-0.2.0-py3-none-any.whl.

File metadata

  • Download URL: pwdlib-0.2.0-py3-none-any.whl
  • Upload date:
  • Size: 8.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: python-httpx/0.27.0

File hashes

Hashes for pwdlib-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 be53812012ab66795a57ac9393a59716ae7c2b60841ed453eb1262017fdec144
MD5 c312d99b94bf528ac75c2276dce85372
BLAKE2b-256 085ad2aa0f51379aff843983cf96b837261e39e3891578d1e5dfb5d57123ce86

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page