diff --git a/python-jose.spec b/python-jose.spec
index ec0c5c1..992efc5 100644
--- a/python-jose.spec
+++ b/python-jose.spec
@@ -28,6 +28,15 @@ BuildRequires:  python3dist(pytest-runner)
 Obsoletes:      python3-%{srcname}-pycryptodome < 3.2.0-3
 %endif
 
+# Upstream recommends the cryptography backend. We add it as a soft dependency
+# so that anyone who does not go out of their way to select a different backend
+# gets the best experience.
+%if 0%{?fedora} == 32
+Recommends:     python3-%{srcname}+cryptography = %{version}-%{release}
+%else
+Recommends:     python3dist(python-jose[cryptography])
+%endif
+
 %global common_description %{expand:
 The JavaScript Object Signing and Encryption (JOSE) technologies - JSON Web
 Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), and JSON Web
@@ -226,6 +235,7 @@ echo '>>> Cross-backend compatibility and coexistence <<<' 1>&2
   pycrypto). Upstream refuses to switch to pycryptodomex for the pycryptodome
   backend (https://github.com/mpdavis/python-jose/issues/26), so we disable the
   corresponding extra because it will fail to install.
+- Add a soft dependency on the cryptography backend extra
 
 * Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.2.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild