Get Started with Apache Shiro

Handy Hint

Shiro v1 and v2 version end-of-life notice

As of February 28, 2024, Shiro v1 was superseded by v2.

As of June 29, 2026, Shiro v2 was superseded by v3.

Apache Shiro focuses on ease-of-use, so you can rely on secure, stable authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application. Get started!

The Basics

Introduction to the Apache Shiro Java Security Framework A high-level overview of Apache Shiro’s capabilities.
Architecture An architectural overview of Apache Shiro.
Terminology A list of definitions of common security concepts and concerns.
Apache Shiro Project Background Apache Shiro, like most useful tools, was created out of necessity. Learn more about the project history and mission statement.

Tutorials

10-Minute Tutorial Learn all the ins and outs of the Shiro Framework in under 10 minutes. This quick and simple tutorial shows how a developer uses Shiro in their application.
Your First Shiro Application If you’re new to Apache Shiro, this short tutorial will show you how to set up a very simple application secured by Apache Shiro. We’ll discuss Shiro’s core concepts along the way to help familiarize you with Shiro’s design and API.

Other Resources

Introductory Articles… and Beyond! Articles and Guides written by and for members of the Apache Shiro community.

Next Steps

Once you have completed the tutorials above, consider exploring these topics:

All Guides - Browse the complete collection of Shiro guides.
Reference Documentation - Comprehensive reference covering all Shiro features.
Realms - Learn how to connect Shiro to your user data sources.
Migration Guide - If you are upgrading from an older Shiro version.

Need Help?

Mailing Lists - Ask questions and get help from the community.
Issue Tracker - Report bugs or request features.