Fork me on GitHub

Apache Shiro Logo Simple. Java. Security. Apache Software Foundation Event Banner

Apache Shiro™ is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications.

Getting Started

Authentication

Support logins across one or more pluggable data sources (LDAP, JDBC, Active Directory...

Authorization

Perform access control based on roles or fine grained permissions, also using plug...

Cryptography

Secure data with the easiest possible Cryptography API’s available, giving you...

Session Management

Use sessions in any environment, even outside web or EJB containers. Easily...

Web Integration

Save development time with innovative approaches that easily handle web specific...

Integrations

API’s giving you power and simplicity beyond what Java provides by default...

Latest news:

2.2.1 available

by Francois Papon on 2026年06月17日

2.2.0 available

by Francois Papon on 2026年05月26日

Apache Shiro: A New Chapter Driven by Community

by Lenny Primak on 2026年04月29日

3.0.0-alpha-1 available

by Lenny Primak on 2026年02月27日

2.1.0 available

by Francois Papon on 2026年02月08日

Popular Guides:

Java Authentication Guide

Learn how Shiro securely verifies identities.

Java Authorization Guide

Learn how Shiro handles permissions, roles and users.

Web App Tutorial

Step-by-step tutorial for securing a web application with Apache Shiro.

Apache Shiro Mini Book

A free InfoQ mini-book by
Nebrass Lamouchi