Security keys & HSMs

Nitrokey HSM 2

Hardware security module for PKI, code signing, CA operations, and SSH host key storage. Open-source firmware, USB-A interface. The affordable HSM for teams that need hardware-bound keys but can't justify an enterprise rack appliance.

Nitrokey 3C NFC

EAL 6+ certified secure element, open-source firmware. FIDO2/WebAuthn, OpenPGP, OTP, PIV smart card. USB-C + NFC. The open-source alternative to YubiKey — with a higher security certification.

Nitrokey 3A NFC

USB-A variant of the Nitrokey 3 with NFC. Same EAL 6+ secure element and open-source firmware as the 3C. For legacy hardware without USB-C or as a backup key.

Nitrokey 3A Mini

Compact USB-A hardware security key with an NXP SE050 EAL 6+ secure element and Rust open-source firmware, delivering phishing-resistant FIDO2/WebAuthn MFA plus OpenPGP, OTP, and X.509 key storage.

Nitrokey 3C (No NFC)

USB-C hardware security key built on an EAL 6+ certified SE050 secure element and Rust firmware. Delivers FIDO2, U2F, OpenPGP and OTP for phishing-resistant authentication and key protection.

Nitrokey 3A (No NFC)

USB-A hardware token built on an SE050 secure element certified to Common Criteria EAL 6+, with Rust-based open-source firmware. Consolidates FIDO2, OTP, and OpenPGP/PIV in one tamper-resistant device.

Nitrokey Passkey

FIDO2/WebAuthn and U2F hardware key for phishing-resistant passwordless login and 2FA. Rust-based open-source firmware on an nRF52 secure element, made in Germany, priced for fleet-wide rollout.