---
id: pyjwkest
version: "1.4.4"
license: Apache 2.0
license_treatment: permissive
maintenance: aging
---

# pyjwkest — Python implementation of JWT, JWE, JWS and JWK

License: permissive · Maintenance: aging · Downloads: 481.5K/mo

## What it is and what it does

Pyjwkest is a Python library implementing the JOSE standards for JWT, JWS, JWE, and JWK as defined in IETF drafts. It handles creation, signing, encryption, and validation of JSON Web tokens and manages cryptographic keys used in token operations. The library depends on pycryptodomex for cryptographic primitives, requests for HTTP operations, and compatibility libraries (six, future).

The package is in Beta status and has not been actively maintained since its last release 314 days ago. While the repository remains available and has accumulated 93 stars, the maintainer has explicitly stated the library is no longer actively maintained and is seeking someone to take over responsibility. For projects already using it, the code may be stable; for new projects, this unmaintained status is a significant consideration.

Use it for:

- Signing and validating JWT tokens in authentication systems and OAuth flows
- Encrypting sensitive data in JSON Web Encryption format for secure transmission
- Managing cryptographic keys in JOSE-compliant applications
- Implementing federated identity or token exchange protocols
- Building security layers in microservices that need standardized token handling

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Implements JWT, JWS, JWE, and JWK standards for signing, encrypting, and managing JSON Web tokens and cryptographic keys.

Yes-with-conditions. The library implements mature JOSE standards and has low install friction, but its unmaintained status and aging codebase (last release 314 days ago) make it risky for new projects. Consider it only if you are maintaining existing code that already depends on it, or if you are willing to fork and maintain it yourself. For new projects, evaluate actively maintained alternatives.

## Install

pip install pyjwkest
uv add pyjwkest
poetry add pyjwkest

## Installing pyjwkest

Before you install: Low install friction with pure-Python wheel distribution. However, maintenance status is aging—last release was 314 days ago and the project is explicitly marked as not actively maintained, though the repository remains open.

License in practice: Licensed under Apache 2.0 (permissive), allowing use in commercial and proprietary projects with minimal restrictions.

Quickstart:

pip install pyjwkest

import pyjwkest

# Create and sign a token using the library's JWT/JWS capabilities
# with pycryptodomex for cryptographic operations

Depends on pycryptodomex for cryptographic operations; compilation may require Python development headers on some systems.

Verify before relying:

- Current compatibility with modern Python versions beyond 3.5 (classifiers list 3.5 but requires_python is unspecified)
- Whether unmaintained status poses security risks for new deployments or if existing code is stable enough for production use
- Active community or fork availability if bugs or security issues emerge
- Specific API usage patterns and examples beyond what the description excerpt provides

## Package facts

- License: Apache 2.0 (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: aging
- Downloads: 481.5K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

JWT implementation Python, JWS JWE JWK library, JSON Web token signing, cryptographic key management, JOSE standards Python, token encryption decryption, web token validation, jwt-tokens, cryptography, unmaintained

[View on SkillFed](https://skillfed.io/packages/pyjwkest) · [View on PyPI](https://pypi.org/project/pyjwkest/)