solokeys.com

What It Is

SoloKeys is an open-source hardware security key vendor focused on secure login scenarios, with its Solo 2 series as the main product line. Its core positioning is as a FIDO2/WebAuthn security key, designed to replace or strengthen traditional password-based logins and reduce the risk of phishing attacks and account takeover. The site emphasizes that passkeys and credentials are stored on the user’s own hardware key rather than uploaded to the cloud, highlighting “digital sovereignty” and local control.

Core Capabilities and Deployment

Solo 2 supports FIDO2 and WebAuthn, making it suitable for websites and services compatible with these standards. Usage is straightforward: plug it into a USB-A or USB-C port, then touch the capacitive sensor during login to confirm authentication. No additional software or drivers are required. Solo 2+ adds NFC, enabling tap-to-authenticate on compatible Android and iOS devices. The product is based on the Trussed® open-source firmware framework. Both the hardware and firmware are public, and the circuits, components, designs, and schematics can be reviewed on GitHub. The hardware is licensed under CERN-OHL-S. For developers, the Hacker edition can be flashed with custom firmware, used to build FIDO2 applications, and used to experiment with Trussed®.

Pricing and Compliance

Pricing is based on a one-time hardware purchase: Solo 2 is around USD 34-35, Solo 2+ NFC is USD 46, and the Hacker edition is around USD 35-50. The source text does not disclose subscription fees, bulk purchasing policies, payment methods, shipping details, or compliance/certification information such as FIPS or Common Criteria.

Pros and Cons

Its strengths include open-source transparency, local credential storage, clear pricing, driver-free operation, and support for firmware updates, making it well suited to users who value auditability. The limitations are also clear: it only works with services that support FIDO2/WebAuthn; the source text does not describe capabilities such as centralized enterprise management, key lifecycle management, audit reports, or alert integrations; and it does not elaborate on recovery strategies if a key is lost.

Who It’s For and Access from China

Solo 2 is suitable for phishing-resistant protection of personal accounts, strong authentication for enterprise employees, security professionals, and anyone doing FIDO2/WebAuthn development and testing. Access, payment, and logistics from China are not explained in the source text, so they should be considered unknown. If purchasing from China is restricted, users may want to look at local alternatives such as Feitian FIDO security keys, or compare similar products such as YubiKey and Google Titan Security Key.