OnlyKey

OnlyKey is a small USB security device with a six-button keypad and a display. It works as a hardware security key, a password manager, and a store for encryption keys, all in one unit that you carry on a keyring.

The main idea is that sensitive data never leaves the device unencrypted, and the PIN is typed on the device itself rather than on the computer. This means malware or a keylogger on a shared or infected machine cannot capture the PIN or the stored credentials.

• Two-factor authentication: works with FIDO2 and U2F for services such as Google, GitHub, and Microsoft accounts.
• Password storage: holds around two dozen account slots. You unlock the device with a PIN, press a button, and it types the username, password, or one-time code into the computer like a keyboard.
• Encryption keys: supports OpenPGP, SSH keys, TOTP codes, and HMAC challenge-response.
• Recovery and safety options: a backup key can be configured, and a wipe code or a secondary PIN can be set to erase the device or open a decoy profile if you are forced to unlock it.
• Open source: the firmware and hardware design are published, so the security claims can be checked by outside reviewers.

Because the device acts as a standard USB keyboard, it needs no drivers and works on Windows, macOS, Linux, ChromeOS, and Android with an adapter. It can also enter passwords at boot time, before the operating system loads.

Setup is done through a browser-based configuration tool or a command-line utility. There is no cloud account and no subscription, so all data stays on the hardware you own. This makes OnlyKey useful for people who want strong login security without depending on a phone app or an online service.