🔒 Your pocket-sized cyber bodyguard for fearless online freedom
OnlyKey is a professional-grade, open-source security key and hardware password manager that supports universal two-factor authentication standards like FIDO2/U2F and Yubico OTP. Its rugged, waterproof design ensures portability and durability, while PIN protection with auto data wipe safeguards your credentials. Compatible across Windows, Mac, Linux, and Android, it simplifies secure logins by auto-filling usernames and passwords, making it an essential tool for modern digital security.
Flash Memory Type | NAND |
Manufacturer | OnlyKey |
Hardware Connectivity Technology | USB Type A |
UPC | 633832116009 |
Item model number | EF-7H5W-FQ6I |
Hardware Platform | Mac |
Item Weight | 0.6 ounces |
Product Dimensions | 2 x 0.7 x 0.25 inches |
Item Dimensions LxWxH | 2 x 0.7 x 0.25 inches |
ASIN | B06Y1CSRZX |
Is Discontinued By Manufacturer | No |
Date First Available | April 3, 2017 |
C**M
Security on your keyring
Working in fields where confidentiality is a must and security is required by law, this is an awesome tool. For something that doesn't have biometric access, it's wonderful.First, its software and implementation is robust. For passwords, it's basically a keyboard emulator. As long as it can plug into a USB port, it'll type in the password you set. It doesn't need special drivers.Second, it's fail-safe. Forced-entry attempts will wipe out the memory. You only need to memorize 2 or 3 numerical sequences to access it, and they're short ones. Just come up with numerical rhymes or even a set of "dance steps" over the six buttons. If you need to rotate passwords every so often, then as long as you can store a random string in a secure location (even if it's a piece of paper you can lock away) this will let you carry that password without anyone knowing what it is.I dinged it one star, though, because there's something of a learning curve to set it up. If you make a mistake, it won't damage the key, but some newbie users may panic. Lock yourself out during setup? You can reset and try again. Oh, and you can generate encrypted backups of the password data.A few things that would improve the product:-A firmware upgrade to add in a random string generator, perhaps a "floating pin" exposed to ambient EM noise, for password generation. It wouldn't directly update the password, but just provide something a user can pick from.-An extension socket for convenient use. This is a solid device, so I'm worried about breaking any port I use when I tap my PIN.-Some additional programming options for login macros. Sometimes you need to hit the tab key more than once to get into a login or password field.
J**.
The most useful physical private key, due to password manager
YES, BUY THIS KEY, IT IS GREAT, HIGH SECURITY AND NEVER WORRY ABOUT COMPLEX PASSWORDS AGAIN. THE POSITIVES OUT WAY THE NEGATIVES.NEGATIVESLearning curve for people that are good with tech. Definitely should offer a case cover to put entire key inside. I bought a case from another company for key chain.FIDO2 only works for Google, Facebook and other big tech. However, having key to heavily protect only these sites until/unless physical key becomes more standard, for ex. Banks. It's still worth only protecting big tech sites because your life is on them. Making protecting only two or three big tech sites actually very valuable.Plus, that is not only keys fault. Or the fault of any physical private key company. All websites should offer physical private key option. What are Banks waiting for? Big tech offers it because they know it is the most secure option.It's most secure because it's not stored on your computer and you must physically touch key with pin in the only key to use.POSITIVESPassword manager works for everything. That is where learning curve is.THE PDF THEY OFFER IS REALLY GREAT, THEY CLEARLY CARE ABOUT THE PRODUCT AND THE CUSTOMERS UNDERSTANDING OF WHAT ALL OF THIS SECURITY STUFF IS.Is this key worth having. I recommend everyone get one. It's hard to get hacked or have identity stolen if you are using this key. DO NOT SET A BACK UP WAY TO GET INTO GOOGLE OR FACEBOOK. THAT WOULD MAKE HACKING YOUR FB GOOGLE EASY. IF PHYSICAL PRIVATE ONLY KEY IS THE ONLY WAY IN THEN HACKERS ARE NOT GETTING IN. BUY TWO OR THREE OF THESE. MIRROR THE KEYS INFO AND PUT ONE KEY IN SAFE. I highly recommend this physical key. The learning curve is worth the trouble.
A**R
How I use my Onlykey.
I see some long reviews here, so I'll try to not retread and pass on what I've learned about this thing. Everyone has different desires so maybe this won't work how you think, or maybe it will.I wanted to secure my logons across the web, going with unique LONG passwords on every account I valued. Also I wanted to use U2F on every site that supports it. This device does both of those.Upon starting the Chrome App, you are asked to set your pins. It took me about 5 or 6 tries to get through this step. The buttons are strange and take getting used too. For one thing, they register a "press" when you "release" the button. It also blinks the light with each successful press. No light = no press. Using the silicon sleeve MASSIVELY helps me press the buttons.Next you get to the SLOTS Tab in the app where you are presented with boxes for entering your U2F info which takes up fully HALF the page! So obviously you have this fill this out right? Nope. You CAN fill this out, but it all comes pre-configured. No need to mess with that unless you desire.When you choose a slot to configure, you get a page full of options. While you can fill all this out, I've found that; for me, it's best if I just enter the password. Just because you can configure it to auto-type the URL, login ID and password, doesn't mean it's all that great of an experience when you do. It types slow, probably won't work between different browsers, and so forth. I've found my PC asking simply for a password on occasion and with my impossibly long password, I can't type it in. Neither can I use the Onlykey if it has the URL and logon configured. So for my use of unique, really long impossible passwords, it's best to only configure each button for a password and leave it at that. But that's perfect. Bookmarks and URL links are everywhere. No need to configure them here.Some other things not explained well.If you want to use it for U2F.....First thing to do is pick a slot to dedicate to U2F. I picked slot 6. Go down to the bottom, use the U2F option and save it. Now button 6 is your U2F key. The Onlykey flashes blue when it is being asked for the U2F key. When it flashes press the 6 button. According to the manual you can also configure the same key for passwords and URL's. This either confused me or the device, and it didn't work, or I didn't understand how to make it work for me. I'm happy just using a slot for U2F.Next, you can't "edit" your slots. You "Update" them. Meaning you can't see what's in a slot, so just check the box for the entry you want to update, put in the data, and hit save. Once I figured out how to update and I stopped re-entering ALL my data each time I wanted to change a slot, I started liking this device much more.If you hit "WIPE", it does not wipe that slot, it wipes the entire device. *sigh*. This button should be on the home page, not on the slot page.I got an OTP adapter and used this on my Droid Maxx2 and Samsung Tab S2 to log into the browsers (another reason I have to skip the URL/ID's).So my use is as a tiny hardware password-typing keyboard. It works well, and I feel a lot more secure using impossible passwords for everything.Finally, I use a 3 " USB extension cable which gives me flexibility to type in the pin numbers more easily.To summarize:Put on the silicone cover.Use the 3" USB extension cable.Dedicate a button/slot to U2F.Skip the URL's, just use passwords.Wipe Button wipes the device not the slot.
Trustpilot
1 month ago
3 days ago