Flask-Login

User authentication and session management for Flask.

flask-login Permissive license MIT AGING ★ 3,676 v0.6.3 released 2023-10-30

Install

flask-login on PyPI

pip

pip install flask-login

uv

uv add flask-login

poetry

poetry add flask-login

Package facts

License	MIT (permissive)
Python support	supports the current Python release (>=3.7)
Install friction	low — pure-Python wheel
Runtime dependencies	2 — Flask, Werkzeug
Maintenance	aging — 1,018 days since the last release
Last repo commit	2025-08-27
First released	2013-06-18
Popularity	one of the top 1,000 most-downloaded packages on PyPI (30-day window, as of 2026-08-13)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-13)

Evidence: Flask_Login-0.6.3-py3-none-any.whl

Development Status :: 4 - BetaEnvironment :: Web EnvironmentFramework :: FlaskIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: PythonTopic :: Internet :: WWW/HTTP :: Dynamic ContentTopic :: Software Development :: Libraries :: Python Modules

About Flask-Login

from the package's own PyPI description — quoted content, verbatim

Flask-Login

Tests (image) coverage (image) Software License (image)

Flask-Login provides user session management for Flask. It handles the common tasks of logging in, logging out, and remembering your users' sessions over extended periods of time.

Flask-Login is not bound to any particular database system or permissions model. The only requirement is that your user objects implement a few methods, and that you provide a callback to the extension capable of loading users from their ID.

Installation

Install the extension with pip:

$ pip install flask-login

Usage

Once installed, the Flask-Login is easy to use. Let's walk through setting up a basic application. Also please note that this is a very basic guide: we will be taking shortcuts here that you should never take in a real application.

To begin we'll set up a Flask app:

```python import flask

app =...

Read as markdown · JSON record · Source repository · Homepage · Docs

AI interpretation — verify before relying

AI-generated interpretation of the package facts above; every digit, version, license, or vulnerability id it cites is grounded in the facts already shown on this page

Flask-Login provides user session management for Flask applications, handling login, logout, and persistent user sessions without tying you to any specific database or permissions model.

Low friction install with only Flask and Werkzeug as runtime dependencies. Maintenance is aging—last release was 2023-10-30 and the repository shows no recent activity, though it remains active and well-starred (3676 stars).

MIT license is permissive; you may use, modify, and distribute Flask-Login freely in commercial and private projects with minimal restrictions.

Usage

pip install flask-login

import flask_login
login_manager = flask_login.LoginManager()
login_manager.init_app(app)

@login_manager.user_loader
def user_loader(user_id):
    return get_user(user_id)

@app.route('/protected')
@flask_login.login_required
def protected():
    return f'Logged in as: {flask_login.current_user.id}'

Requires Flask app with a secret_key set; user objects must implement required methods (see UserMixin).

Verdict: Flask-Login is a stable, permissively licensed session-management extension for Flask with low install friction and no known vulnerabilities. Its aging maintenance status (last release October 2023) is typical for mature, feature-complete libraries, though potential users should monitor the repository for security updates.

Needs verification

Whether the aging maintenance status reflects active stability or signals reduced responsiveness to security issues.
Compatibility with recent Flask versions beyond the stated Python 3.7+ requirement.

flask user authenticationsession management flasklogin logout flaskuser session persistenceflask auth extensionremember me functionalityflask user management