OnlyKey

OnlyKey is a hardware-based multi-factor authentication (MFA) device designed to replace passwords with physical security keys. The device supports FIDO2/WebAuthn standards, enabling phishing-resistant login for platforms like Google, GitHub, and AWS. It also functions as an OpenPGP smart card for encrypting emails, files, and messages, with onboard storage for encrypted notes and credentials. Key features include USB and NFC connectivity (for mobile use), cross-platform compatibility (Windows, macOS, Linux, iOS, Android), and tamper-evident hardware. The device requires no software installation—users simply plug it in or tap it to authenticate. It also generates app-specific passwords for services lacking FIDO2 support and includes a programmable "emergency button" for duress scenarios. OnlyKey emphasizes privacy, avoiding cloud dependency or biometric data. Critics note its higher cost ($59–$99) compared to competitors like YubiKey, limited integration with mobile apps (e.g., iOS keychain), and the risk of physical loss (no recovery option without backups). However, its open-source firmware, openPGP capabilities, and offline operation appeal to security-conscious users, journalists, and enterprises prioritizing phishing-resistant authentication over convenience.