Solo is an open source security key, and you can get one at solokeys.com.
Solo supports FIDO2 and U2F standards for strong two-factor authentication and password-less login, and it will protect you against phishing and other online attacks. With colored cases and multilingual guides we want to make secure login more personable and accessible to everyone around the globe.
This repo contains the Solo firmware, including implementations of FIDO2 and U2F (CTAP2 and CTAP) over USB and NFC. The main implementation is for STM32L432, and it's ported to NRF52840 and EFM32J.
For development no hardware is needed, Solo also runs as a standalone application for Windows, Linux, and Mac OSX. If you like (or want to learn) hardware instead, you can run Solo on the NUCLEO-L432KC development board, or we make Solo for Hacker, an unlocked version of Solo that lets you customize its firmware.
Security
Solo is based on the STM32L432 microcontroller. It offers the following security features.
True random number generation to guarantee random keys.
Security isolation so only simple & secure parts of code can handle keys.
Flash protection from both external use and untrusted code segments.
256 KB of memory to support hardened crypto implementations and, later, additional features such as OpenPGP or SSH.
No NDA needed to develop for.
Solo for Hackers
Solo for Hacker is a special version of Solo that let you customize its firmware, for example you can change the LED color, and even build advanced applications.
You can only buy Solo for Hacker at solokeys.com, as we don't sell it on Amazon and other places to avoid confusing customers. If you buy a Hacker, you can permanently lock it into a regular Solo, but viceversa you can NOT take a regular Solo and turn it a Hacker.
If you have a Solo for Hacker, here's how you can load your own code on it. You can find more details, including how to permanently lock it, in our documentation. We only support Python3.
issman added SoloKeys as alternative to OneSpan DIGIPASS FX7
Comments and Reviews
Unfortunately, I cannot recommend it for purchase. I bought my soloKey usb NFC back in 2018. And at first it worked fine, but then the browsers started not supporting it one by one, and then the websites. You can't put any firmware on it now. Solokeys software cannot be installed on Windows or Linux without errors. My second key from Yubiko still works and is supported by any services.