Nitrokey · Security key
Nitrokey Pro 2
OpenPGP smart-card key with a tamper-resistant smart card, one-time passwords, and a 16-entry password manager. For email/file encryption, SSH, and X.509 — OpenPGP Card 3.4, no FIDO2.
$135
EU equivalent: €109 incl. VAT · nitrokey.comShips direct from Nitrokey (Germany) · typically 5–10 business days
Vegas batch closed — buy direct on Nitrokey, or get notified when the next bulk batch opens.
Get the next Nitrokey batch
The Vegas batch has closed. Need it now? Buy direct on Nitrokey. Rather wait for the next bulk run — group pricing, PO/invoicing, and event pickup? Tell us what you’d order and we’ll email you the moment it opens. No commitment; enough interest is what schedules the next batch.
No battery
No battery. Ships by any service with no dangerous-goods restrictions.
Why the Nitrokey Pro 2
What this security key does that alternatives don't.
Tamper-resistant smart card
Keys live on a smart card rated for more than 100,000 PIN entries and 20 years of storage, and cannot be exported — a compromised host cannot copy them.
OTP and password manager built in
3 HOTP and 15 TOTP slots plus a 16-entry password manager, so one key covers OpenPGP, second-factor codes, and credential storage.
Open-source hardware from Germany
OSHwA-certified open hardware under EU jurisdiction — auditable rather than taken on trust.
Specifications
Full technical details.
Compliance framework mapping
Controls this product satisfies across 12 frameworks.
Cryptographic key management
Hardware-bound key generation and storage. Private keys generated and stored inside a certified secure element (EAL 6+) and are non-exportable by design — for login credentials (Nitrokey) and crypto-asset custody (Ledger) alike.
Supply chain risk — hardware and firmware
Open-source firmware is publicly auditable and reproducibly built. EU jurisdiction hardware is not subject to US National Security Letters. Directly addresses hardware supply chain risk in CMMC and NIS2.
Compared to
Honest comparisons against the most likely alternatives.
vs. Nitrokey 3
The Nitrokey 3 adds FIDO2/WebAuthn, NFC on some models, Rust firmware and an EAL 6+ certified SE050 secure element. The Pro 2 is the older smart-card line: no FIDO2, but a 16-entry password manager and mature OpenPGP/OTP support.
vs. Nitrokey Start
Start is the stripped-down OpenPGP key. Pro 2 adds the tamper-resistant smart card, OTP slots, the password manager, and stronger curve support.
Shipping & returns
What to expect after you order.
Shipping
Ships from our Tennessee 3PL. 2-day FedEx to most US addresses, expedited options at checkout. Signature required. Business day processing — orders placed before 2pm ET ship same day.
Returns & RMA
30-day return window for unopened units. Defective units handled under Nitrokey's 2-year warranty — we manage the US-side RMA so you don't ship to Berlin.
Purchase orders
Net-30 terms available for approved organizations. W-9 on file. Generate a quote from the stack builder or email sales@securitygadgets.shop with your PO requirements.
Authorized reseller
We are an official Nitrokey authorized reseller. Full manufacturer warranty applies. Identical hardware and firmware to buying direct from nitrokey.com — with US inventory and support.
