diff --git a/pkgs/development/python-modules/pysqlitecipher/default.nix b/pkgs/development/python-modules/pysqlitecipher/default.nix
new file mode 100644
index 00000000000..6eaa1d13eb7
--- /dev/null
+++ b/pkgs/development/python-modules/pysqlitecipher/default.nix
@@ -0,0 +1,38 @@
+{ lib
+, buildPythonPackage
+, pythonOlder
+, fetchPypi
+, cryptography
+, onetimepad
+}:
+
+buildPythonPackage rec {
+  pname = "pysqlitecipher";
+  version = "0.22";
+
+  disabled = pythonOlder "3.6";
+
+  format = "setuptools";
+
+  src = fetchPypi {
+    inherit pname version;
+    sha256 = "daff63ca2719fbd698aa10f64493c4b31fb67877a8e8dbb8090e9c03a1b1a9e4";
+  };
+
+  propagatedBuildInputs = [
+    cryptography
+    onetimepad
+  ];
+
+  # upstream has no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "pysqlitecipher" ];
+
+  meta = {
+    description = "Lightweight and easy to use sqlite wrapper with built-in encryption system";
+    homepage = "Ghttps://github.com/harshnative/pysqlitecipher";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ dotlambda ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 4235bba3307..72fa774af61 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -6657,6 +6657,8 @@ in {
 
   pysolcast = callPackage ../development/python-modules/pysolcast { };
 
+  pysqlitecipher = callPackage ../development/python-modules/pysqlitecipher { };
+
   pysyncthru = callPackage ../development/python-modules/pysyncthru { };
 
   python-codon-tables = callPackage ../development/python-modules/python-codon-tables { };