{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/17"},{"label":"Dynamic Content","url":"https://skillfed.io/packages/category/internet-www-http-dynamic-content/3"}],"enrichment":{"capability":"Flask-Security adds authentication, authorization, and user management to Flask applications, supporting multiple authentication methods including OAuth, WebAuthn, and multi-factor authentication.","skillfed_tags":["authentication","authorization","flask-extension"],"use_cases":["Add user registration and login to a Flask web application without building authentication from scratch","Implement role-based access control to restrict views and resources to specific user groups","Enable multi-factor authentication (SMS, email, or authenticator apps) for sensitive applications","Integrate social login (OAuth) so users can sign in via external providers like Google or GitHub","Support passwordless or username-based authentication as an alternative to email-based login","Add WebAuthn/passkey support for modern, phishing-resistant authentication"],"what_it_does":"Flask-Security is a Flask extension that bundles authentication, authorization, and user management into a single package. It provides ready-to-use features for user registration, login, password reset, role-based access control, and modern authentication standards like OAuth social login, WebAuthn/passkey support, and multi-factor authentication via SMS, email, or authenticator apps. The package is designed around OWASP best practices and reduces reliance on abandoned dependencies by bundling common use cases.\n\nThe extension integrates with Flask-Login for session management, Flask-Principal for authorization, Flask-WTF for form security, and email-validator for email handling. It's actively maintained as part of the Pallets Community Ecosystem (the organization behind Flask itself) and has evolved since its original 2012 release to support modern authentication patterns including unified signin, freshness decorators for sensitive operations, and email normalization.","worth_installing":"Yes. Flask-Security is actively maintained, has no known vulnerabilities, low install friction, and provides a comprehensive, OWASP-aligned authentication and authorization layer for Flask applications. It's suitable for production use and backed by the Pallets Community Ecosystem. Install it if you need to add user management and security features to a Flask app without implementing these systems yourself."},"id":"flask-security","links":{"html":"https://skillfed.io/packages/flask-security","md":"https://skillfed.io/packages/flask-security.md","pypi":"https://pypi.org/project/flask-security/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-12","license_spdx":null,"license_treatment":"permissive","name":"Flask-Security","python_support":"supports_current","summary":"Quickly add security features to your Flask application."},"popularity":{"monthly_downloads":158183,"position":10732,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"5.8.2"}