---
id: msal-extensions
version: "1.3.1"
license: MIT License
license_treatment: permissive
maintenance: aging
---

# msal-extensions — Microsoft Authentication Library extensions (MSAL EX) provides a persistence API that can save your data on disk, encrypted on Windows, macOS and Linux. Concurrent data access will be coordinated by a file lock mechanism.

License: permissive · Maintenance: aging · Popularity: top 1,000 on PyPI

## Install

pip install msal-extensions
uv add msal-extensions
poetry add msal-extensions

## Description

# Microsoft Authentication Extensions for Python

The Microsoft Authentication Extensions for Python offers secure mechanisms for client applications to perform cross-platform token cache serialization and persistence. It gives additional support to the [Microsoft Authentication Library for Python (MSAL)](https://github.com/AzureAD/microsoft-authentication-library-for-python).

MSAL Python supports an in-memory cache by default and provides the [SerializableTokenCache](https://msal-python.readthedocs.io/en/latest/#msal.SerializableTokenCache) to perform cache serialization. You can read more about this in the MSAL Python [documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-python-token-cache-serialization). Developers are required to implement their own cache persistence across multiple platforms and Microsoft Authentication Extensions makes this simpler.

The supported platforms are Windows, Mac and Linux.
- Windows - [DPAPI](https://docs.microsoft.com/en-us/dotnet/standard/security/how-to-use-data-protection) is used for encryption.
- MAC - The MAC KeyChain is used.
- Linux - [LibSecret](https://wiki.gnome.org/Projects/Libsecret) is used for...

## AI interpretation — verify before relying

Provides secure, platform-specific token cache persistence for MSAL Python applications, encrypting sensitive authentication data on Windows (DPAPI), macOS (Keychain), and Linux (LibSecret).

Verdict: Production-ready library for desktop and CLI applications needing encrypted token persistence with MSAL. Low install friction, permissive licensing, and no known vulnerabilities make it safe to adopt. Aging maintenance (517 days since release) is typical for stable infrastructure; however, recent repository activity and Production/Stable status indicate ongoing support. Not recommended for web applications due to scalability concerns.

[View on SkillFed](https://skillfed.io/packages/msal-extensions) · [View on PyPI](https://pypi.org/project/msal-extensions/)