diff --git a/security/Makefile b/security/Makefile
index 63c5c616b3de..fc2c29e956be 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -921,6 +921,7 @@
     SUBDIR += py-cryptography
     SUBDIR += py-cryptography-legacy
     SUBDIR += py-cryptography-vectors
+    SUBDIR += py-cryptojwt
     SUBDIR += py-ctypescrypto
     SUBDIR += py-cybox
     SUBDIR += py-detect-secrets
diff --git a/security/py-cryptojwt/Makefile b/security/py-cryptojwt/Makefile
new file mode 100644
index 000000000000..515dbf8eb5af
--- /dev/null
+++ b/security/py-cryptojwt/Makefile
@@ -0,0 +1,25 @@
+PORTNAME=	cryptojwt
+PORTVERSION=	1.9.4
+CATEGORIES=	security python
+MASTER_SITES=	PYPI
+PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
+
+MAINTAINER=	sunpoet@FreeBSD.org
+COMMENT=	Python implementation of JWT, JWE, JWS and JWK
+WWW=		https://cryptojwt.readthedocs.io/en/latest/ \
+		https://github.com/IdentityPython/JWTConnect-Python-CryptoJWT
+
+LICENSE=	APACHE20
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}poetry-core>=1.0.0:devel/py-poetry-core@${PY_FLAVOR}
+RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}requests>=2.25.1<3:www/py-requests@${PY_FLAVOR}
+
+USES=		python shebangfix
+USE_PYTHON=	autoplist concurrent cryptography pep517
+
+NO_ARCH=	yes
+
+SHEBANG_FILES=	src/cryptojwt/tools/jwtpeek.py
+
+.include <bsd.port.mk>
diff --git a/security/py-cryptojwt/distinfo b/security/py-cryptojwt/distinfo
new file mode 100644
index 000000000000..97e73204deed
--- /dev/null
+++ b/security/py-cryptojwt/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1744215559
+SHA256 (cryptojwt-1.9.4.tar.gz) = 6daa5c9a8841e34947410008c3cbfdb4330d4024961e4e623012b545f991de0c
+SIZE (cryptojwt-1.9.4.tar.gz) = 64480
diff --git a/security/py-cryptojwt/pkg-descr b/security/py-cryptojwt/pkg-descr
new file mode 100644
index 000000000000..4317ebcf5060
--- /dev/null
+++ b/security/py-cryptojwt/pkg-descr
@@ -0,0 +1,2 @@
+cryptojwt provides an implementation of the JSON cryptographic specs JWS, JWE,
+JWK, and JWA [RFC 7515-7518] and JSON Web Token (JWT) [RFC 7519].