(/) 

Java Security libraries

« All Tags (/libs)

Selected Tags
Click on a tag to remove it

Security  (/libs)

More Tags
Click on a tag to add it and filter down

 Projects 14 (/libs/security/projects)

 Authorization 6 (/libs/security/authorization)

 Authentication 4 (/libs/security/authentication)

 Acl 3 (/libs/security/acl)

 Java 3 (/libs/security/java)

 Access-control 2 (/libs/security/access-control)

 JWT 2 (/libs/security/jwt)

Security libraries
Showing projects tagged as Security

 (https://github.com/keycloak/keycloak) Keycloak (/keycloak-alternatives)

(/keycloak-alternatives)
  9.8   10.0 L2  Java

Open Source Identity and Access Management For Modern Applications and Services

 (https://github.com/spring-projects/spring-security) Spring Security (/spring-

(/spring-security-alternatives)
security-alternatives)
  9.4   10.0 L4  Java

Spring Security

Tink (/tink-alternatives)
(/tink-alternatives)
  9.3   9.9  Java

DISCONTINUED. Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are
secure, easy to use correctly, and hard(er) to misuse.

 (https://github.com/cryptomator/cryptomator) Cryptomator (/cryptomator-

(/cryptomator-alternatives)
alternatives)
  9.1   9.5 L5  Java

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy
and control over your data.

 (https://github.com/jwtk/jjwt) jjwt (/jjwt-alternatives)

(/jjwt-alternatives)
  9.0  6.8 L1  Java

Java JWT: JSON Web Token for Java and Android

 (https://github.com/apache/shiro) Apache Shiro (/apache-shiro-alternatives)
(/apache-shiro-alternatives)
  8.7   9.6 L3  Java

Apache Shiro

 (https://github.com/jeremylong/DependencyCheck) DependencyCheck (/dependencycheck-alternatives)

  8.7   9.8  Java

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

 (https://github.com/bcgit/bc-java) Bouncy Castle (/bouncy-castle-alternatives)

(/bouncy-castle-alternatives)
  7.9   9.8 L2  Java

Bouncy Castle Java Distribution (Mirror)

 (https://github.com/pac4j/pac4j) pac4j (/pac4j-alternatives)

(/pac4j-alternatives)
  7.6   9.7 L4  Java

Security engine for Java (authentication, authorization, multi frameworks): OAuth, CAS, SAML, OpenID Connect, LDAP,
JWT...

 (https://github.com/casbin/jcasbin) jCasbin (/jcasbin-alternatives)

(/jcasbin-alternatives)
  7.4   7.6  Java

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

Keywhiz (/keywhiz-alternatives)
(/keywhiz-alternatives)
  7.2  0.0  Java

DISCONTINUED. A system for distributing and managing secrets

 (https://github.com/cossacklabs/themis) Themis by Cossack Labs (/themis-

(/themis-alternatives)
alternatives)
  6.6   4.8 L3 C

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data
storage. Has unified APIs across 14 platforms.

Google Keyczar (/keyczar-alternatives)

(/keyczar-alternatives)
  5.9   0.0
DISCONTINUED. Easy-to-use crypto toolkit

 (https://github.com/aserto-dev/topaz) Topaz (/topaz-alternatives)

(/topaz-alternatives)
  5.4  9.4  Go

Cloud-native authorization for modern applications and APIs

 (https://github.com/OpenIdentityPlatform/OpenAM) OpenAM (/openam-

(/openam-alternatives)
alternatives)
  5.4   8.8  Java

OpenAM is an open access management solution that includes Authentication, SSO, Authorization, Federation,
Entitlements and Web Services Security.
 (https://github.com/okta/okta-spring-boot) Okta Spring Boot Starter (/okta-
(/okta-spring-boot-alternatives)
spring-boot-alternatives)
  4.9   8.8  Java

Okta Spring Boot Starter

 (https://github.com/jchambers/java-otp) #<Sawyer::Resource:0x00007f0fa1b68b60> (/java-otp-alternatives)

  4.5   10.0  Java

A one-time password (HOTP/TOTP) library for Java

 (https://github.com/Hakky54/sslcontext-kickstart) SSLContext-Kickstart (/sslcontext-kickstart-alternatives)

  4.4   9.3  Java

🔐 A lightweight high level library for configuring a http client or server based on SSLContext or other properties such as TrustManager, KeyManager or
Trusted Certificates to communicate over SSL TLS for one way authentication or two way authentication provided by the SSLFactory. Support for Java, Scala
and Kotlin based clients with examples. Available client examples are: Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty
and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, Vertx, Scala client
Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k Kohttp and Ktor. Also gRPC,
WebSocket and ElasticSearch examples are included

 (https://github.com/vt-middleware/passay) Passay (/passay-alternatives)

(/passay-alternatives)
  3.8  7.3  Java

Password policy enforcement for Java.

Kalium (/kalium-alternatives)
  3.7   0.0  Java

DISCONTINUED. Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium

 (https://github.com/Password4j/password4j) Password4j (/password4j-

(/password4j-alternatives)
alternatives)
  3.7   7.5  Java

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in
databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the
standards and have been reviewed to perform better in the JVM.

 (https://github.com/GoSimpleLLC/nbvcxz) Nbvcxz (/nbvcxz-alternatives)

(/nbvcxz-alternatives)
  3.7  2.1 L3  Java

Password strength estimator

 (https://github.com/hdiv/hdiv) Hdiv (/hdiv-alternatives)

(/hdiv-alternatives)
  3.7   0.0 L2  Java

Hdiv CE | Application Self-Protection

PicketLink (/picketlink-alternatives)
  3.7   0.0 L4  Java

DISCONTINUED. Umbrella project for security and identity management.

 (https://github.com/auth0/jwks-rsa-java) Jwks RSA (/jwks-rsa-java-alternatives)
(/jwks-rsa-java-alternatives)
  3.5   4.3  Java

JSON Web Key Set parser.

 (https://github.com/okta/okta-auth-java) Okta Authentication SDK for Java

(/okta-auth-java-alternatives)
(/okta-auth-java-alternatives)
  3.4   9.3  Java

okta-auth-java

 (https://github.com/BastiaanJansen/otp-java) OTP-Java (/otp-java-alternatives)

  3.1   5.9  Java

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

 (https://github.com/acciente/oacc-core) OACC Framework (/oacc-core-

(/oacc-core-alternatives)
alternatives)
  2.9   0.0 L1  Java

OACC (Object ACcess Control) is an advanced Java Application Security Framework

 (https://github.com/tersesystems/securitybuilder) SecurityBuilder
(/securitybuilder-alternatives)
(/securitybuilder-alternatives)
  2.2   0.0  Java

Fluent builders with typesafe API for the JCA

 (https://github.com/Connect2id/Nimbus-JWT) Nimbus JOSE+JWT (/nimbus-jwt-

(/nimbus-jwt-alternatives)
alternatives)
  2.0   0.0
JSON Web Token (JWT) implementation for Java with support for signatures (JWS), encryption (JWE) and web keys
(JWK).

* Code Quality Rankings and insights are calculated and provided by Lumnify.
They vary from L1 to L5 with "L5" being the highest.

About
Your go-to Java Toolbox. Our goal is to help you find the software and libraries you need. Made by developers for developers. The collection of libraries
and resources is based on the Awesome Java List and direct contributions here. To add a new library, please, check the contribute section (/site/contribute).

Site Links:
Java Newsletter (/newsletter) Categories (/categories) Tags (/libs) Changelogs (/site/changelogs) About (/site/about)  (/newsletter/feed)
 Become a sponsor (/advertise)

Sponsored by: CodeRabbit (https://www.coderabbit.ai/?utm_source=libhunt&utm_medium=web&utm_campaign=libhunt_dec_24) · Advertise

SaaSHub (https://www.saashub.com) (/advertise)

More from LibHunt

Android (https://android.libhunt.com) JavaScript (https://js.libhunt.com) Ruby (https://ruby.libhunt.com)
C++ (https://cpp.libhunt.com) Kotlin (https://kotlin.libhunt.com) Rust (https://rust.libhunt.com)
Crystal (https://crystal.libhunt.com) .NET (https://dotnet.libhunt.com) Scala (https://scala.libhunt.com)
Elixir (https://elixir.libhunt.com) Node.js (https://nodejs.libhunt.com) Self Hosted (https://selfhosted.libhunt.com)
Go (https://go.libhunt.com) PHP (https://php.libhunt.com) Swift (https://swift.libhunt.com)
Haskell (https://haskell.libhunt.com) Python (https://python.libhunt.com) SysAdmin (https://sysadmin.libhunt.com)
iOS (https://ios.libhunt.com) React (https://react.libhunt.com)

(https://www.sa
07-07?
utm_source=ba

Awesome Java is part of the LibHunt (https://www.libhunt.com) network. Terms (/terms). Privacy Policy (/privacy).

(CC) BY-SA (https://creativecommons.org/licenses/by-sa/4.0/)