Top Java Security Libraries 2025

GitHub Libraries Java Security Libraries

keycloak/keycloak 25K +145

Added by sizovs added 5 days ago

Add authentication to applications and secure services with minimum effort.

jwtk/jjwt 10K +28

Added by sizovs added 1 month ago

Java JWT: JSON Web Token for Java and Android.

spring-projects/spring-security 9K +14

Added by sizovs added 2 weeks ago

Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.

frohoff/ysoserial 8K +2

Added by sizovs added 2 days ago

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

auth0/java-jwt 5K +9

Added by sizovs added 1 month ago

Java implementation of JSON Web Token (JWT).

scribejava/scribejava 5K +4

Added by sizovs added 2 weeks ago

Simple OAuth library for Java.

apache/shiro 4K

Added by sizovs added 2 weeks ago

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management.

casbin/jcasbin 2K +5

Added by sizovs added 6 days ago

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

pac4j/pac4j 2K +4

Added by sizovs added 2 weeks ago

pac4j is an easy and powerful security framework for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services.

patrickfav/bcrypt 522 +2

Added by sizovs added 5 days ago

A Java standalone implementation of the bcrypt password hash function. Based on the Blowfish cipher it is the default password hash algorithm for OpenBSD and other systems including some Linux distributions. Includes a CLI Tool.

password4j/password4j 367

Added by sizovs added 5 days ago

Password4j is a Java user-friendly cryptographic library for encrypting and verifying passwords with different Key derivation functions (KDFs) and Cryptographic hash functions (CHFs).

tink-crypto/tink-java 169 +2

Added by sizovs added 5 days ago

Using crypto in your application shouldn't have to feel like juggling chainsaws in the dark. Tink is a crypto library written by a group of cryptographers and security engineers at Google.

apache/commons-crypto 122 +1

Added by sizovs added 5 days ago

Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level.

nbaars/paseto4j 67

Added by sizovs added 2 days ago

Paseto is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.

Join libs.tech

...and unlock some superpowers

GitHub

We won't share your data with anyone else.