CATEGORY
Authentication 2,312 crates
Data as of 2026-07-25 (crates.io database dump, timestamp 2026-07-25T02:00:36Z). Source: crates.io · db-dump.tar.gz · methodology & corrections.
pbkdf2Generic implementation of PBKDF2209,336,341MIT OR Apache-2.0
password-hashTraits which describe the functionality of password hashing algorithms, with optional support for a
`no_std`/`no_alloc`-friendly…99,440,612MIT OR Apache-2.0
scryptScrypt password-based key derivation function55,258,002MIT OR Apache-2.0
nkeysRust implementation of the NATS nkeys library46,110,913Apache-2.0
signatoryMulti-provider elliptic curve digital signature library with ECDSA and Ed25519 support45,786,101Apache-2.0 OR MIT
argon2Pure Rust implementation of the Argon2 password hashing function with support
for the Argon2d, Argon2i, and Argon2id algorithmic…40,241,591MIT OR Apache-2.0
hyper-http-proxyA proxy connector for Hyper-based applications29,593,969MIT
docker_credentialReads a user's docker credentials from config29,578,221MIT OR Apache-2.0
http-authHTTP authentication: parse challenge lists, respond to Basic and Digest challenges. Likely to be extended with server support and…13,414,415MIT/Apache-2.0
reqsignSigning HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services13,307,352Apache-2.0
bcrypt-pbkdfbcrypt-pbkdf password-based key derivation function13,269,127MIT OR Apache-2.0
gcp_authGoogle cloud platform (GCP) authentication using default and custom service accounts11,362,821MIT
ssh-encodingPure Rust implementation of SSH data type decoders/encoders as described in RFC42519,096,048Apache-2.0 OR MIT
pasetorsPASETO: Platform-Agnostic Security Tokens (in Rust)8,503,189MIT
totp-rsRFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features.8,402,520MIT
ssh-keyPure Rust implementation of SSH key file format decoders/encoders as described
in RFC4251/RFC4253 and OpenSSH key formats, as…8,014,009Apache-2.0 OR MIT
hyper-proxyA proxy connector for Hyper-based applications7,646,224MIT
biscuitA library to work with Javascript Object Signing and Encryption(JOSE),
including JSON Web Tokens (JWT), JSON Web Signature (JWS)…5,920,238MIT
webauthn-rs-protoWebauthn Specification Bindings5,876,831MPL-2.0
webauthn-rs-coreWebauthn Cryptographic Operation Handling5,822,156MPL-2.0
webauthn-rsWebauthn Framework for Rust Web Servers5,214,535MPL-2.0
passkey-typesRust type definitions for the webauthn and CTAP specifications4,258,560MIT OR Apache-2.0
pwhashA collection of password hashing routines in pure Rust.4,251,087MIT
openidOpenID Connect & Discovery client library using async / await.4,106,057Unlicense OR MIT
ldap3Pure-Rust LDAP Client3,845,947MIT/Apache-2.0
http-auth-basicHTTP Basic Authentication Scheme (RFC 7617 and RFC 2617 compliant, base64-encoded credentials) for Rust applications3,624,497MIT OR Apache-2.0
compact_jwtMinimal implementation of JWT for OIDC and other applications3,582,984MPL-2.0
josekitJOSE (Javascript Object Signing and Encryption) library for Rust.3,468,654MIT OR Apache-2.0
passkey-authenticatorA webauthn authenticator supporting passkeys.3,385,416MIT OR Apache-2.0
tonic-middlewareAsync middleware and interceptor for Tonic services3,385,001MIT
passkey-clientWebauthn client in Rust.3,379,675MIT OR Apache-2.0
async-socks5An async/.await SOCKS5 implementation2,930,429Apache-2.0 OR MIT
coins-ledgerLedger Nano X/S connection and communication management library2,761,083MIT OR Apache-2.0
ssh-agent-libA collection of types for writing custom SSH agents2,611,984MIT OR Apache-2.0
oxide-authA OAuth2 library for common web servers, featuring a set of configurable and pluggable backends.2,481,136MIT OR Apache-2.0
passkeyA one stop library to implement a passkey client and authenticator2,314,894MIT OR Apache-2.0
passkey-transportsA crate managing CTAP2 transport-specific bindings.2,311,453MIT OR Apache-2.0
aliriImplementations of the Javascript/JSON Object Signing and Encryption (JOSE) standards2,167,743MIT OR Apache-2.0
internal-russh-forked-ssh-keyPure Rust implementation of SSH key file format decoders/encoders as described
in RFC4251/RFC4253 and OpenSSH key formats, as…2,114,712Apache-2.0 OR MIT
digest_authImplementation of the Digest Auth algorithm as defined in IETF RFC 2069, 2617, and 7616, intended for HTTP clients2,086,150MIT
fast-socks5Fast SOCKS5 client/server implementation written in Rust async/.await (tokio)1,987,944MIT
aliri_tokensBackground token management and renewal based on best practices1,877,325MIT OR Apache-2.0
aliri_reqwestBackground token management and renewal for reqwest based on best practices1,845,215MIT OR Apache-2.0
sequoia-openpgpOpenPGP data types and associated machinery1,677,318LGPL-2.0-or-later
auth-git2Authentication for `git2`1,670,742BSD-2-Clause
hyper-socks2A SOCKS5 connector for hyper library1,624,367Apache-2.0 OR MIT
oxide-auth-asyncCombines oxide-auth with async and futures1,439,572MIT OR Apache-2.0
totp-liteA simple, correct TOTP library.1,438,281MIT
midCreating a Machine ID hash for MacOS/Windows/Linux/iOS1,428,925MIT OR Apache-2.0
ledger-apduLedger Hardware Wallet - Common APDU Protocol Types1,424,367Apache-2.0
yubicoYubikey client API library1,391,329MIT OR Apache-2.0
ledger-transportLedger Hardware Wallet - Generic Transport1,347,744Apache-2.0
phcPure Rust implementation of the Password Hashing Competition (PHC) string format which is used for
storing password hashes1,249,769Apache-2.0 OR MIT
ledger-transport-hidLedger Hardware Wallet - HID Transport1,214,370Apache-2.0
azure_jwtA simple JWT validator for Microsoft Azure Id tokens.1,104,081MIT
spiffeCore SPIFFE identity types and Workload API sources1,074,279Apache-2.0
spake2The SPAKE2 password-authenticated key-exchange algorithm.1,067,025MIT OR Apache-2.0
password-authPassword authentication library with a focus on simplicity and ease-of-use,
including support for Argon2, PBKDF2, and scrypt…1,049,566MIT OR Apache-2.0
smg-authAuthentication and authorization for control plane APIs1,007,831Apache-2.0
libgssapiA safe binding to gssapi963,786MIT
rs-firebase-admin-sdkFirebase Admin SDK for Rust920,323MIT
aws-msk-iam-sasl-signerAWS MSK IAM SASL Signer905,611Apache-2.0
libgssapi-sysA low level binding to gssapi889,667MIT
turnkey_api_key_stamperGenerate signatures over Turnkey API requests using a P-256 key.888,558Apache-2.0
rsaslThe Rust SASL framework, aimed at both middleware-style protocol implementation and application code.
Designed to make SASL…869,605Apache-2.0 OR MIT
windows-permissionsSafe Rust bindings to Windows permissions APIs840,161MIT
libnssRust bindings for creating libnss modules833,379LGPL-3.0
tame-oauthA (very) simple oauth 2.0 library801,910MIT OR Apache-2.0
pam-sysFFI wrappers for the Linux Pluggable Authentication Modules (PAM)796,319MIT OR Apache-2.0
tonic-async-interceptorAsync variant of Tonic's interceptor function783,748MIT
hyper-proxy2A proxy connector for Hyper-based applications743,920MIT
alcoholic_jwtLibrary for validation of RS256 JWTs690,492GPL-3.0-or-later
actix-web-grantsAuthorization extension `actix-web` to protect your endpoints658,343MIT OR Apache-2.0
ambient-idDetects ambient OIDC credentials in a variety of environments648,947MIT OR Apache-2.0
machineid-rsGet an encrypted unique MachineID/HWID/UUID. Inspired by .Net DeviceId.643,836MIT OR Apache-2.0
samaelA SAML2 library for Rust545,876MIT
diqwestTrait to extend reqwest for digest auth flow.496,722MIT
libreauthCollection of user authentication tools.484,614CECILL-C OR CECILL-2.1
protect-endpoints-proc-macroA proc-macro way to protect your endpoints445,604MIT OR Apache-2.0
sha-cryptPure Rust implementation of the SHA-crypt password hashing algorithm based on SHA-256/SHA-512
as implemented by the POSIX crypt C…436,808MIT OR Apache-2.0
yubikeyPure Rust cross-platform host-side driver for YubiKey devices from Yubico with
support for hardware-backed public-key decryption…433,210BSD-2-Clause
mail-authDKIM, ARC, SPF and DMARC library for Rust414,284Apache-2.0 OR MIT
wascapWascap - wasmCloud Capabilities. Library for extracting, embedding, and validating claims403,012Apache-2.0
blsfulBLS signature implementation according to the IETF spec on the BLS12-381 curve.392,394MIT OR Apache-2.0
google-authenticatorThis Rust crate can be used to interact with the Google Authenticator mobile app for 2-factor-authentication.384,060MIT
sshcertsA library for parsing, verifying, and creating SSH Certificates332,789non-standard
oauth-credentialsTypes for representing the credential pairs of OAuth 1.0.298,070MIT OR Apache-2.0
actix-grants-proc-macroA proc-macro way to validate user permissions for `actix-web-grants` crate.292,780MIT OR Apache-2.0
zitadelAn implementation of ZITADEL API access and authentication in Rust.268,867MIT OR Apache-2.0
oauth1-requestYet yet yet another OAuth 1.0 client library.265,531MIT OR Apache-2.0
sequoia-netNetwork services for OpenPGP254,656LGPL-2.0-or-later
workosOfficial Rust SDK for the WorkOS API252,596MIT
gouthThis library provides auto-renewed tokens for GCP service authentication.248,636MIT
openpgp-cert-dShared OpenPGP Certificate Directory245,472MIT
zkryptiumRust crypto library for zero-knowledge proofs244,652Apache-2.0
sequoia-cert-storeA certificate database interface.241,904LGPL-2.0-or-later
spire-apiRust gRPC client for the SPIRE APIs229,835Apache-2.0
sequoia-wotAn implementation of OpenPGP's web of trust.224,581LGPL-2.0-or-later
qcs-api-client-grpcgRPC client for the QCS API222,480Apache-2.0
qcs-api-client-commonCommon code for QCS API clients219,791Apache-2.0
min_jwtMinimal JSON Web Token library213,587MIT OR Apache-2.0
rusty_pasetoA type-driven, ergonomic alternative to JWT for secure stateless PASETO tokens.212,372MIT OR Apache-2.0
provider-archiveLibrary for reading and writing wasmCloud capability provider archive files210,647Apache-2.0
sequoia-autocryptAutocrypt support197,341LGPL-2.0-or-later
sequoia-sqCommand-line frontends for Sequoia193,134LGPL-2.0-or-later
ockam_nodeThis crate provides an implementation of an Ockam [Ockam][main-ockam-crate-link]
Node and is intended for use by crates that…187,989Apache-2.0
ockamEnd-to-end encryption and mutual authentication for distributed applications.181,401Apache-2.0
argonauticaIdiomatic Argon2 password hashing for Rust180,019MIT/Apache-2.0
ockam_coreCore types of the Ockam library.178,517Apache-2.0
ockam_vaultA software-only Ockam Vault implementation.177,310Apache-2.0
tame-oidcA (very) thin layer of OIDC like functionality174,699MIT OR Apache-2.0
ockam_transport_tcpTCP Transport for the Ockam Routing Protocol.168,446Apache-2.0
checksumsTool for making/verifying checksums of directory trees159,802MIT
json-proof-tokenA library implementation based on the new JOSE Working Group draft specifications:
JSON Web Proof (JWP), JSON Proof Token (JPT)…159,496Apache-2.0
appattestVerification of Apple App Attestations and Assertions, to help enforce iOS App Integrity Checks157,254MIT
ssh-encoding-fork-artiPure Rust implementation of SSH data type decoders/encoders as described
in RFC4251153,851Apache-2.0 OR MIT
ssh-key-fork-artiPure Rust implementation of SSH key file format decoders/encoders as described
in RFC4251/RFC4253 and OpenSSH key formats, as…153,750Apache-2.0 OR MIT
spiffe-rustlsSPIFFE-based mutual TLS integration for rustls147,577Apache-2.0
aws-rds-signerA Rust library for generating AWS IAM authentication tokens for Amazon RDS database connections147,408MIT
scim-serverA comprehensive SCIM 2.0 server library for Rust with multi-tenant support and type-safe operations144,757MIT
rusty_paserkPlatform Agnostic Serializable Keys (PASERK) is an extension on PASETO for key management141,393MIT
brokerReal-time BaaS (Backend as a Service)139,921MIT
yubico_ngYubikey client API library136,431MIT OR Apache-2.0
ockam_transport_websocketWebSocket Transport for the Ockam Routing Protocol.135,232Apache-2.0
ic-vetkeysA set of tools designed to help canister developers integrate vetKeys into their Internet Computer (ICP) applications133,929Apache-2.0
djangohashersA Rust port of the password primitives used in Django project.133,579BSD-3-Clause
aliri_oauth2JWT authorization based on validating OAuth2 scopes132,166MIT OR Apache-2.0
ffsendEasily and securely share files from the command line.
A fully featured Send client.129,190GPL-3.0
ockam_executorOckam async executor crate127,652Apache-2.0
jsonwebtokens-cognitoDecodes and verifies Json Web Tokens issued by AWS Cognito117,339MIT
ockam_identityOckam is a library for building devices that communicate securely, privately
and trustfully with cloud services and other devices.116,469Apache-2.0
axum-keycloak-authProtect axum routes with a JWT emitted by Keycloak.112,452MIT OR Apache-2.0
pamSafe Rust wrappers for PAM authentication109,616MIT OR Apache-2.0
challenge_responsePerform HMAC-SHA1 and OTP challenges with YubiKey, OnlyKey and NitroKey, in pure Rust.109,420MIT OR Apache-2.0
balloon-hashPure Rust implementation of the Balloon password hashing function108,431MIT OR Apache-2.0
csrfCSRF protection primitives106,816MIT
aliri_traitsToken-based authorization with authorities that verify access grants104,926MIT OR Apache-2.0
ockam_key_exchange_xxThe Ockam Noise XX implementation.104,329Apache-2.0
sshkey-attestFIDO SK SSH Key Attestation100,962MPL-2.0
graph-rs-sdkRust SDK Client for Microsoft Graph and Microsoft Identity Platform100,688MIT
ockam_transport_bleBluetooth Low Energy (BLE) Transport for the Ockam Routing Protocol.100,037Apache-2.0
aliri_towerTower middleware for interacting with `aliri` authorities99,440MIT OR Apache-2.0
graph-oauthRust SDK Client for Microsoft Identity Platform98,343MIT
ockam_apiOckam's request-response API96,532Apache-2.0
u2fRust FIDO U2F Library96,479MIT OR Apache-2.0
ledger-zondax-genericLedger Hardware Wallet - Common APDU Protocol Types94,700Apache-2.0
rouxSimple and (a)synchronous Reddit API wrapper94,580MIT
graph-errorGraph Api error types and handling for the graph-rs-sdk crate93,178MIT
ockam_key_exchange_coreThe Ockam Key Exchange trait.89,442Apache-2.0
poem-grantsAuthorization extension for `poem` to protect your endpoints89,296MIT OR Apache-2.0
ockam_channelChannel is an abstraction responsible for sending messages (usually over the network)
in encrypted and authenticated way.89,177Apache-2.0
ockam-ffiFFI layer for ockam_vault.88,987Apache-2.0
captchaforge[DO NOT USE — UNDER ACTIVE DEVELOPMENT, NOT PRODUCTION-READY] Captcha solver scaffolding for Firefox + BiDi-driven browsers. The…88,614MIT OR Apache-2.0
mediawikiA MediaWiki client library86,627MIT OR Apache-2.0
ockam_key_exchange_x3dhThe Ockam X3DH implementation.86,334Apache-2.0
ucanImplement UCAN-based authorization with conciseness and ease!86,306Apache-2.0
pam-bindingsSimplified PAM module creation in Rust83,499MIT
ockam_commandEnd-to-end encryption and mutual authentication for distributed applications.83,351Apache-2.0
signature_blsThe Ockam BLS signature impementation.81,644Apache-2.0
pam-clientApplication API wrapper to Pluggable Authentication Modules (PAM)80,510MPL-2.0
srpPure Rust implementation of the Secure Remote Password (SRP) password-authenticated key exchange
(PAKE) algorithm as described in…80,476MIT OR Apache-2.0
gcp-saGoogle Cloud Platform Service Account OAuth authentication abstraction79,823MIT
propelauthA Rust crate for managing authentication and authorization with support for multi-tenant / B2B products, powered by PropelAuth79,688MIT
iam-rsComplete Rust library for parsing, validating, and evaluating IAM policies. Provider-agnostic authorization engine with full AWS…77,184MIT
ockam_multiaddrAn implementation of multiformats.io/multiaddr75,871Apache-2.0
stytchStytch Rust client74,848MIT
polypletsSecurity primitives to verify origin of service calls in Fluence network74,645Apache-2.0
sos-sdkDistributed, encrypted database for private secrets.72,856MIT OR Apache-2.0
async-oauth2An asynchronous OAuth2 flow implementation.72,744MIT OR Apache-2.0
ffsend-apiA fully featured Firefox Send API client.72,532MIT
mcfPure Rust implementation of the Modular Crypt Format (MCF) which is used to store password hashes
in the form `${id}$...`72,361Apache-2.0 OR MIT
aliri_axumAxum for interacting with `aliri` authorities72,025MIT OR Apache-2.0
reqwest-oauth1Add OAuth1 signature to reqwest with oauth1-request.71,017MIT OR Apache-2.0
indy-data-typesCommon data types for Hyperledger Indy (https://www.hyperledger.org/projects), which provides a distributed-ledger-based…68,853Apache-2.0
ockam_macrosEnd-to-end encryption and mutual authentication for distributed applications.67,643Apache-2.0
prs-libSecure, fast & convenient password manager CLI with GPG & git sync67,592LGPL-3.0
ockam_transport_udpUDP Transport for the Ockam Routing Protocol.66,300Apache-2.0
ockam_transport_udsUnix Domain Socket (UDS) Transport for the Ockam Routing Protocol66,241Apache-2.0
check_elevationCheck if the current process is elevated. A successor to the `is_elevated` crate. Now no_std!65,403BSD-2-Clause
webauthn-rs-device-catalogWebauthn RS Device Catalog63,297MPL-2.0
mc-attestation-verifierSGX Enclave Attestation Report Verification62,982Apache-2.0
oxide-auth-axumA OAuth2 server library for Axum featuring a set of configurable and pluggable backends.62,532MIT OR Apache-2.0
ockam_vault_awsAn AWS KMS Ockam Vault implementation.61,257Apache-2.0
product-os-securityProduct OS : Security provides a suite of helper tools to easily perform cryptographic operations including generating hashes,…60,623GPL-3.0-only
firestore-db-and-authThis crate allows easy access to your Google Firestore DB via service account or OAuth impersonated Google Firebase Auth…59,057MIT
djpassA command-line tool to generate and verify passwords used in Django project.58,630BSD-3-Clause
ockam_vault_coreThe Ockam Vault trait.57,739Apache-2.0
runeauthRuneauth - Simple Extendable Cookies57,705MIT
ledger-transport-hidapiLedger Hardware Wallet - HID Transport57,371Apache-2.0
sequoia-gpg-agentA library for interacting with GnuPG's gpg-agent57,283LGPL-2.0-or-later
noosphere-cliReference client and pedagogical tool to demonstrate the principles of the Noosphere protocol56,152MIT OR Apache-2.0
nostro2Nostro2 is a simple toolset for interacting with the Nostr protocol.55,810MIT
greentic-secrets-specCanonical traits and data models for Greentic secrets (read/write, versioning, metadata).55,467MIT
greentic-secrets-apiShared traits and types for Greentic secrets backends.55,034MIT
greentic-secrets-coreCore runtime and backend orchestration for Greentic secrets.54,839MIT
didwebvh-rsImplementation of the did:webvh method in Rust53,678Apache-2.0
signature_bbs_plusThe Ockam BBS+ signature impementation.53,666Apache-2.0
greentic-secrets-provider-devLocal development backend for the Greentic secrets core.53,037MIT
signature_coreSignature core types of the Ockam library.51,988Apache-2.0
google-authzThis library provides auto-renewed tokens for Google service authentication.51,428MIT OR Apache-2.0