---
id: libpass
version: "1.9.3"
license: BSD
license_treatment: permissive
maintenance: aging
---

# libpass — Fork of passlib, a comprehensive password hashing framework supporting over 30 schemes

License: permissive · Maintenance: aging · Downloads: 554.5K/mo

## What it is and what it does

Libpass is a password hashing library for Python 3 that centralizes support for over 30 password hashing algorithms under a single, consistent API. It handles both hashing new passwords and verifying existing hashes, making it useful for tasks ranging from validating system files to implementing full-strength password storage in multi-user applications.

The library is distributed as a pure-Python wheel with no runtime dependencies, keeping installation lightweight. It supports Python 3.9 through 3.13 and is licensed permissively under BSD. The package is classified as Alpha and has been maintained since 2024-09-11; it is a fork of an upstream project.

Use it for:

- Hash and verify user passwords in web applications or APIs using a configurable hashing scheme.
- Migrate or validate existing password hashes from legacy systems by supporting multiple algorithms.
- Implement two-factor authentication workflows that require secure password verification alongside TOTP.
- Verify password hashes from system files or htpasswd files for administrative tools.
- Support htdigest authentication schemes in HTTP-based applications or services.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

A password hashing library providing implementations of over 30 password hashing algorithms and a framework for hashing and verifying passwords across different schemes.

Yes, if you need a straightforward, dependency-free password hashing library with broad algorithm support. The permissive BSD license and low install friction make it accessible. However, verify whether this fork is actively maintained and confirm that the specific hashing schemes you need are production-ready rather than legacy.

## Install

pip install libpass
uv add libpass
poetry add libpass

## Installing libpass

Before you install: Low install friction with no runtime dependencies. Maintenance status is aging—last commit was 2025-10-27 and the package reached version 1.9.3 on 2025-10-09, roughly 309 days before the fact sheet date. The repository is not archived and has 40 stars.

License in practice: Licensed under BSD (permissive), which allows commercial and private use with minimal restrictions, making it suitable for most application contexts.

Quickstart:

pip install libpass

from passlib.context import CryptContext

context = CryptContext(schemes=["sha512_crypt"])
hash = context.hash("password")
is_valid = context.verify("password", hash)

Requires Python 3.9 or later.

Verify before relying:

- Whether this fork is actively maintained or if upstream is the recommended source.
- Performance characteristics or benchmarks for the 30+ supported hashing schemes.
- Whether all schemes are equally production-ready or if some are legacy/deprecated.

## Package facts

- License: BSD (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: aging
- Downloads: 554.5K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

password hashing library, password verification framework, multi-scheme password hashing, secure password storage, password hash management, crypt hash algorithms, password hashing framework, password-hashing, cryptography, authentication

[View on SkillFed](https://skillfed.io/packages/libpass) · [View on PyPI](https://pypi.org/project/libpass/)