Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| LocalSend LocalSend is a free, open-source, cross-platform app for securely sharing files and messages with nearby devices over the local network, ac… | 97 | 95060 | stable |
| bitcoin/bitcoin Bitcoin Core is the reference implementation of the Bitcoin protocol, providing a full node, wallet, and optional graphical interface. It v… | 90 | 90328 | active |
| unionlabs/union Union is a trust-minimized zero-knowledge bridging protocol enabling general message passing, asset transfers, NFTs, and DeFi across Cosmos… | 78 | 73786 | active |
| FiloSottile/mkcert mkcert is a command‑line utility that creates locally trusted TLS certificates without any manual configuration. It automatically generates… | 23 | 59741 | active |
| spacedriveapp/spacedrive Spacedrive is an open-source cross-platform file explorer powered by a virtual distributed filesystem written in Rust. It indexes files acr… | 67 | 39079 | active |
| restic backup solution restic is a fast, secure, and efficient command‑line backup program written in Go. It supports multiple backends, deduplication, and strong… | 84 | 36276 | active |
| restic backup solution restic is a fast, secure, and efficient open-source backup program written in Go. It creates encrypted, deduplicated snapshots of files and… | 84 | 36276 | stable |
| bitchat A decentralized peer-to-peer messaging app that combines offline Bluetooth LE mesh networking with internet-based Nostr protocol transport,… | 81 | 36273 | active |
| CyberChef CyberChef is a web-based tool that lets users perform a wide range of data manipulation tasks such as encoding, encryption, compression, ha… | 98 | 36120 | active |
| CyberChef CyberChef is a browser-based web application for performing a wide range of 'cyber' operations such as encryption, encoding, compression, h… | 98 | 36120 | active |
| Anoma Anoma is the reference implementation of the Anoma protocol, a distributed operating system that abstracts existing blockchains into config… | 78 | 33575 | active |
| telegramdesktop/tdesktop The official open-source Telegram Desktop messenger client, built on the Telegram API and MTProto secure protocol. It is a full-featured cr… | 93 | 33052 | stable |
| Linera Linera is a Rust-based decentralized blockchain infrastructure that provides core protocol components, client/server logic, and cross-chain… | 84 | 32056 | active |
| Linera Linera is a decentralized Layer-1 blockchain protocol implemented in Rust, designed for highly scalable, low-latency Web3 applications usin… | 84 | 32056 | active |
| openssl/openssl OpenSSL is a robust, commercial‑grade cryptographic toolkit written in C. It provides a full‑featured implementation of TLS/SSL, DTLS, QUIC… | 99 | 30985 | active |
| DrKLO/Telegram The official open-source code for the Telegram messenger app on Android, written in Java. It allows developers to build their own Telegram … | 66 | 30055 | active |
| Ente Ente is an open-source, end-to-end encrypted cloud platform with client apps for photos (a Google Photos alternative), document/credential … | 95 | 29456 | active |
| Signal Messenger Signal is a free, open-source private messenger offering end-to-end encrypted text, voice, and video communication, built on the Signal Pro… | 92 | 29393 | stable |
| ai/nanoid Nano ID is a tiny (118 bytes), dependency-free JavaScript library for generating secure, URL-friendly unique string IDs using a hardware ra… | 98 | 27084 | stable |
| hashcat Hashcat is a high‑performance password recovery utility that runs on CPUs, GPUs and distributed systems. It supports hundreds of hash algor… | 79 | 26999 | active |
| zama-ai/fhevm FHEVM is a full-stack framework from Zama that enables confidential smart contracts on EVM-compatible blockchains using Fully Homomorphic E… | 82 | 24800 | active |
| Happy Happy is a mobile, web, and desktop client for remotely controlling Claude Code and Codex coding agents from anywhere. It wraps the local C… | 85 | 24200 | active |
| age age is a simple, modern, and secure file encryption tool with a companion Go library. It uses small explicit keys, offers post‑quantum supp… | 82 | 23906 | active |
| age age is a simple, modern, and secure file encryption tool, format, and Go library with small explicit keys, no config options, and UNIX-styl… | 82 | 23906 | stable |
| getsops/sops SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure vi… | 95 | 23393 | stable |
| Magic Wormhole Magic Wormhole is a Python library and command-line tool for securely transferring arbitrary-sized files, directories, or short text betwee… | 77 | 23006 | stable |
| gentilkiwi/mimikatz mimikatz is a well-known Windows security tool written in C that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memo… | 54 | 21909 | active |
| Ciphey Ciphey is a Rust-based CLI tool and library that automatically decrypts encryptions without a known key or cipher, decodes encodings, and c… | 85 | 21662 | active |
| SimpleX SimpleX Chat is a private messaging platform and set of mobile/desktop apps that operate without any user identifiers, delivering end-to-en… | 96 | 19495 | active |
| amark/gun GUN is an open‑source, peer‑to‑peer graph database written in JavaScript. It provides real‑time, offline‑first data synchronization with bu… | 66 | 19140 | active |
| slackhq/nebula Nebula is a scalable overlay networking tool (mesh VPN) built on the Noise Protocol Framework, using certificates and security groups for m… | 93 | 18399 | stable |
| TigerBeetle TigerBeetle is a purpose-built financial transactions database written in Zig, designed for mission-critical safety and performance in onli… | 90 | 17185 | active |
| Hyperledger Fabric Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework written in Go for building blockchain solutions and app… | 93 | 16743 | stable |
| Cryptomator Cryptomator is an open-source desktop and mobile application that provides transparent client-side encryption for files stored in any cloud… | 94 | 16282 | stable |
| OpenCore OpenCore is a UEFI bootloader for booting macOS (Hackintosh) and other operating systems on PC hardware, with an accompanying UEFI developm… | 89 | 15505 | active |
| documenso/documenso Documenso is an open-source, self-hostable alternative to DocuSign for digitally signing documents, built with Next.js, TypeScript, and Pos… | 99 | 15463 | active |
| dogecoin/dogecoin Dogecoin Core is the reference full-node client and wallet for the Dogecoin cryptocurrency, adapted from Bitcoin Core. It lets anyone run a… | 65 | 15232 | active |
| duplicati/duplicati Duplicati is a free, open-source backup client that stores encrypted, incremental, compressed backups on cloud storage services and remote … | 95 | 15085 | active |
| Notesnook Notesnook is a fully open-source, end-to-end encrypted note-taking app positioned as a privacy-focused alternative to Evernote. It is a mon… | 93 | 14683 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 97 | 14605 | stable |
| moonD4rk/HackBrowserData HackBrowserData is a self-contained Go CLI that extracts and decrypts browser data (passwords, cookies, history, bookmarks, credit cards, d… | 86 | 14545 | active |
| kopia/kopia Kopia is a fast, open-source backup and restore tool that creates encrypted, compressed, and deduplicated snapshots of files and directorie… | 93 | 14386 | stable |
| thunderbird/thunderbird-android Thunderbird for Android is a free, open-source, privacy-focused email client for Android, formerly known as K-9 Mail and now part of the Mo… | 97 | 14050 | active |
| libsodium libsodium is a modern, portable, easy-to-use C library for cryptographic operations, forked from NaCl with a compatible but extended API. I… | 81 | 13997 | stable |
| OpenNHP/opennhp OpenNHP is a lightweight, cryptography-powered open-source toolkit written in Go that implements the Cloud Security Alliance's Network-infr… | 97 | 13936 | active |
| borgbackup/borg BorgBackup (Borg) is a deduplicating backup program with optional compression and authenticated encryption. It stores data as content-defin… | 87 | 13856 | active |
| openwall/john John the Ripper jumbo is an open-source offline password cracker supporting hundreds of hash and cipher types, from Unix and Windows passwo… | 71 | 13668 | active |
| Element Element is a glossy, feature-rich Matrix client for web and desktop, built on the Matrix JS SDK, offering end-to-end encrypted messaging, v… | 94 | 13561 | active |
| MetaMask MetaMask is a self-custodial crypto wallet available as a browser extension (Chrome, Firefox, Brave, Edge, Opera) and mobile app, enabling … | 95 | 13237 | active |
| beemdevelopment/Aegis Aegis Authenticator is a free, open-source Android app for managing two-factor authentication (2FA) tokens. It stores HOTP/TOTP tokens in a… | 90 | 13227 | stable |
| KeeWeb KeeWeb is a free, cross-platform password manager compatible with KeePass kdbx database files, available as a desktop app (Electron) or a b… | 74 | 13016 | active |
| LiveSync Self-hosted LiveSync is an Obsidian community plugin that synchronises vaults across devices using self-hosted backends like CouchDB or S3-… | 94 | 12648 | active |
| Nostr Nostr (Notes and Other Stuff Transmitted by Relays) is an open, simple protocol for building a censorship-resistant global social network. … | 32 | 12054 | active |
| VeraCrypt VeraCrypt is a free, open-source disk encryption application based on TrueCrypt 7.1a with security enhancements. It creates encrypted volum… | 89 | 11832 | stable |
| Cyan4973/xxHash xxHash is an extremely fast non-cryptographic hash algorithm library written in C, offering XXH32, XXH64, and the modern XXH3 family (64- a… | 86 | 11312 | stable |
| hashsigs A Rust library implementing hash-based post-quantum digital signatures (WOTS+ and SHRINCS primitives) with an account policy wrapper. It co… | 64 | 11213 | active |
| QuipNetwork/hashsigs-solidity A Solidity implementation of the Winternitz One-Time Signature Plus (WOTS+) scheme, a hash-based post-quantum signature algorithm. It enabl… | 63 | 11211 | active |
| QuipNetwork/hashsigs-ts A TypeScript library implementing hash-based digital signatures, specifically the WOTS+ (Winternitz One-Time Signature Plus) scheme. It is … | 59 | 11191 | active |
| LaZagne LaZagne is an open-source Python application that recovers passwords stored locally by common software such as browsers, mail clients, WiFi… | 38 | 11006 | active |
| Monero Monero is the reference implementation of the Monero (XMR) privacy-focused cryptocurrency, including the full node daemon (monerod), wallet… | 88 | 10865 | active |
| Chia Blockchain The official Python implementation of the Chia blockchain, including full node, farmer, harvester, timelord, and wallet components. It uses… | 93 | 10790 | active |
| krzyzanowskim/CryptoSwift CryptoSwift is a pure Swift library providing standard cryptographic algorithms including AES, ChaCha20, SHA family hashes, HMAC, and CRC. … | 75 | 10579 | active |
| OpenMined/PySyft PySyft is a Python library that lets data scientists run computations on private data that stays on the data owner's server, with results s… | 73 | 10034 | active |
| ValveSoftware/GameNetworkingSockets GameNetworkingSockets is a C++ transport layer library for games providing connection-oriented, message-oriented communication over UDP wit… | 92 | 9946 | stable |
| AGWA/git-crypt git-crypt is a command-line tool that provides transparent encryption and decryption of selected files in a git repository. It lets teams s… | 39 | 9943 | active |
| tonyantony300/dashbeam DashBeam (formerly AltSendme) is an open-source peer-to-peer file transfer application that sends files and folders of any size directly be… | 79 | 9800 | active |
| malwaredllc/byob BYOB is an open-source post-exploitation framework written in Python, featuring a command-and-control server with a web GUI, a cross-platfo… | 77 | 9512 | active |
| CFSSL CFSSL is Cloudflare's PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as both a command line tool and an H… | 98 | 9483 | stable |
| Berty Berty is an open-source, peer-to-peer messaging app with end-to-end encryption that works with or without internet access, using libp2p, IP… | 93 | 9314 | active |
| bitnami/sealed-secrets A Kubernetes controller plus the kubeseal CLI that lets you encrypt Kubernetes Secrets into one-way encrypted SealedSecrets that are safe t… | 97 | 9300 | active |
| golang-jwt/jwt A Go library for creating, signing, parsing, and verifying JSON Web Tokens (JWTs) per RFC 7519. It is the community-maintained successor to… | 75 | 9241 | stable |
| tdlib/td TDLib (Telegram Database Library) is a cross-platform C++ library for building fully functional Telegram clients. It handles networking, MT… | 75 | 9133 | stable |
| immudb immudb is an open-source immutable database written in Go that stores data in SQL, key-value, or document models while guaranteeing tamper-… | 92 | 9042 | stable |
| TelegramMessenger/Telegram-iOS The official open-source source code of the Telegram messaging client for iOS, written in Swift. It allows developers to compile, study, an… | 65 | 9007 | active |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 84 | 8939 | active |
| maxgoedjen/secretive Secretive is a native macOS app that stores and manages SSH keys inside the Mac's Secure Enclave, making them non-exportable. It adds Touch… | 92 | 8888 | active |
| Anytype Anytype Desktop is the official cross-platform client for Anytype, a local-first, peer-to-peer, end-to-end-encrypted personal knowledge bas… | 92 | 8884 | active |
| ethers-io/ethers.js Ethers.js is a complete, compact Ethereum library and wallet implementation written in TypeScript. It provides wallet management, contract … | 84 | 8716 | stable |
| PrivateBin PrivateBin is a minimalist, self-hosted pastebin where the server stores only encrypted data and never learns the paste contents. Encryptio… | 94 | 8612 | active |
| spesmilo/electrum Electrum is a lightweight Bitcoin wallet client written in Python that uses SPV verification instead of downloading the full blockchain. It… | 76 | 8609 | stable |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 40 | 8571 | active |
| OpenBao OpenBao is an open-source, identity-based secrets management system for storing, distributing, and rotating sensitive data such as secrets,… | 94 | 8451 | active |
| Meshtastic Meshtastic is an open-source, off-grid mesh communication system that runs on inexpensive LoRa radios, enabling long-range encrypted text m… | 94 | 8446 | active |
| kishikawakatsumi/KeychainAccess KeychainAccess is a simple Swift wrapper around Apple's Keychain APIs for iOS, macOS, watchOS, tvOS, and Mac Catalyst. It provides an ergon… | 23 | 8256 | stable |
| Lightning Network Daemon A complete implementation of a Lightning Network node written in Go, capable of opening and closing payment channels, routing onion-encrypt… | 95 | 8203 | stable |
| remotely-save/remotely-save Remotely Save is an unofficial Obsidian plugin that syncs vault notes between local devices and cloud storage services like S3, Dropbox, On… | 23 | 8149 | active |
| robinmoisson/staticrypt StatiCrypt is a CLI tool and browser-based utility that encrypts static HTML files with AES-256 using a password, producing a self-containe… | 60 | 8048 | active |
| CryptPad CryptPad is an open-source, end-to-end encrypted collaborative office suite that synchronizes documents in real time. It includes rich text… | 88 | 8003 | stable |
| tutao/tutanota Tuta Mail (formerly Tutanota) is an open-source, end-to-end encrypted email service with integrated encrypted calendar and contacts, availa… | 93 | 7967 | active |
| DataHaven DataHaven is an EVM-compatible Substrate blockchain that provides verifiable decentralized storage, built on StorageHub and secured by Eige… | 63 | 7883 | active |
| peazip/PeaZip PeaZip is a free, open-source, cross-platform file archiver and archive manager supporting 200+ formats including 7z, RAR, ZIP, TAR, and Zs… | 89 | 7882 | stable |
| IBAX IBAX is a blockchain protocol platform written in Go that lets users deploy decentralized applications such as DApps, DeFi, and DAOs quickl… | 88 | 7848 | active |
| panva/jose A zero-dependency JavaScript/TypeScript library implementing JSON Object Signing and Encryption standards (JWA, JWS, JWE, JWT, JWK, JWKS). … | 96 | 7808 | stable |
| kelektiv/node.bcrypt.js A Node.js library providing bcrypt password hashing implemented as a native C++ addon. It handles salting and hashing passwords for secure … | 54 | 7804 | stable |
| pyca/cryptography pyca/cryptography is a Python package providing cryptographic recipes and primitives, aiming to be Python's 'cryptographic standard library… | 75 | 7785 | stable |
| kroma-network/tachyon Tachyon is a modular zero-knowledge (ZK) proving backend written in C++17, designed to let developers implement arbitrary proving schemes w… | 20 | 7640 | active |
| rustls/rustls Rustls is a modern TLS library written in Rust implementing TLS 1.2 and TLS 1.3 for both clients and servers. It provides secure defaults w… | 96 | 7638 | stable |
| Kunzisoft/KeePassDX KeePassDX is a lightweight, open-source password manager and encrypted vault for Android, compatible with the KeePass format (.kdb/.kdbx). … | 100 | 7506 | active |
| tulir/whatsmeow whatsmeow is a Go library implementing the WhatsApp web multidevice API. It enables Go programs to connect to WhatsApp as a linked device, … | 76 | 7444 | active |
| timvisee/ffsend ffsend is a fully featured command-line client for the Firefox Send file-sharing service, letting users upload and download files and direc… | 43 | 7420 | active |
page 1 / 13 next →