OnlyKey DUO is a compact security key and hardware password manager with both USB-C and USB-A connectors. It helps protect online accounts, securely store login credentials, and use two-factor authentication with FIDO2/U2F, TOTP, and Yubico OTP. It also supports SSH and OpenPGP.
OnlyKey DUO
4,290.00 UAH
In stock
One key for everyday security
OnlyKey DUO combines a hardware password manager, a multi-factor authentication key, and a cryptographic token in one compact device. It helps protect your accounts, sign in to services without manually entering complex passwords, and keep important authentication data separate from your browser or computer.
USB-C and USB-A in one device
OnlyKey DUO combines two connection types in one compact device. Use USB-C with modern laptops, smartphones, and tablets, or USB-A with computers and other devices that still use the standard USB-A port. OnlyKey DUO supports Windows, macOS, Linux, ChromeOS, and Android. It is recognized as a standard USB keyboard, so no additional drivers are required.
Hardware password manager
OnlyKey DUO can store login credentials for up to 24 accounts. Each entry can include a username, password, and other login data that the device can automatically enter when you press the corresponding button. This makes it easier to use long, unique passwords without typing them manually or relying solely on a browser or cloud-based password manager. Credentials are configured and managed through the OnlyKey app. For additional protection, you can set up a PIN on OnlyKey DUO. Without the correct PIN, unauthorized users cannot access the stored data.
Multiple two-factor authentication options
OnlyKey DUO supports FIDO2, U2F, OATH TOTP, Yubico OTP, and Challenge-Response. A single device can be used with different websites, apps, password managers, and enterprise systems depending on the authentication method they support. With FIDO2 and U2F, sign-in must be physically confirmed on the security key itself. This makes account access much more difficult without the device, even if someone obtains your password.
SSH, OpenPGP, and encryption
OnlyKey DUO is useful for more than just signing in to websites. It can be used for SSH authentication, OpenPGP, and other cryptographic operations. SSH keys are stored inside the device and can be used to access servers without keeping an unprotected private key on your computer. OpenPGP support can be used for digital signatures, decrypting data, and secure information exchange.
PIN protection and encrypted backup
Data stored on OnlyKey DUO can be further protected with a PIN. The PIN can be entered using the touch buttons on the security key itself, so you do not need to type it on your computer keyboard. After 10 incorrect unlock attempts, the stored data is automatically erased. To avoid losing your settings and credentials along with the device, OnlyKey allows you to create an encrypted backup in advance. The backup can be stored separately and used to restore your data if the key is lost, damaged, or replaced.
Built for everyday use
OnlyKey DUO is designed for regular, active use. Its enclosure is protected against water and dust to IP68 standards and meets MIL-STD-810G requirements. Device is also designed to resist physical tampering, making it suitable for carrying every day.
Secure firmware updates
OnlyKey DUO supports signed firmware updates and verifies firmware integrity during startup. This helps protect the device against modified or unverified firmware and ensures greater control over the software running on the security key.
Open source
OnlyKey is open source, supports signed firmware updates, and verifies firmware integrity during startup. This makes DUO a versatile solution for password protection, two-factor authentication, and working with cryptographic keys.
Key Specifications
- Device type: multi-protocol hardware security key, password manager, and encryption token
- Security features: FIDO2, WebAuthn, FIDO U2F, passwordless authentication, and two-factor authentication
- Additional protocols: Yubico OTP, OATH-TOTP, and Challenge-Response
- Interfaces: USB-C and USB-A
- Wireless connectivity: none
- Controls: 3 touch buttons with support for short and long presses
- Password manager: up to 24 entries for storing usernames, passwords, and two-factor authentication codes
- Cryptographic features: SSH authentication, OpenPGP, digital signatures, encryption, and decryption
- Key storage: 4 RSA slots, 16 ECC slots, and 2 HMAC slots
- RSA: 2048 and 4096 bit
- ECC: X25519, NIST P-256, and secp256k1
- Access protection: optional PIN entered directly on the device
- Backup: create and restore an encrypted backup of your settings
- Compatibility: Windows, macOS, Linux, ChromeOS, Android, and iOS via compatible OTG connectivity
- Enclosure protection: IP68, tamper resistance, and MIL-STD-810G compliance
- Firmware: open source, signed updates, and integrity verification
OnlyKey DUO security key
Metal keyring
FAQ
OnlyKey DUO is a compact hardware security key that also works as a password manager and cryptographic token. It can be used for two-factor and passwordless authentication, storing login credentials, SSH authentication, and OpenPGP.
No additional setup is required to use OnlyKey DUO as a standard FIDO2/WebAuthn security key — simply register it with the service you want to protect. The OnlyKey app is required to configure the password manager, PIN, TOTP, backups, and other advanced features.
OnlyKey DUO provides 24 slots for usernames, passwords, and other login credentials. These are divided across four profiles that can be switched directly on the device. It also supports up to 12 resident FIDO2 credentials, while in U2F mode it can be registered with an unlimited number of compatible websites.
OnlyKey DUO supports FIDO2, FIDO U2F, OATH-TOTP, Yubico OTP, and Challenge-Response. The available authentication method depends on what is supported by the website, app, or enterprise system you are using.
No. OnlyKey DUO has both USB-C and USB-A connectors built into the device, so it can be connected to newer and older computers without a separate adapter. Devices with a Lightning port require a compatible adapter.
Yes. OnlyKey DUO can work with smartphones and tablets that support USB keyboard input. Entering usernames, passwords, and compatible one-time codes is supported on Android and iOS, although some devices may require an OTG or Lightning adapter.
OnlyKey DUO does not have a battery or an internal clock, so it needs access to the current time to generate TOTP codes. For this, the OnlyKey app or a compatible web app from the manufacturer must be running on the computer.
Stored data is protected by encryption and your configured PIN. After 10 incorrect PIN attempts, the device erases the stored information. An encrypted backup created in advance can be restored to another OnlyKey. For important accounts, it is also a good idea to keep recovery codes or register a second security key.
Yes. OnlyKey DUO has a water-resistant, tamper-resistant enclosure. The manufacturer specifies IP68 protection and MIL-STD-810G compliance, making the device suitable for everyday carry on a keyring.
Yes. OnlyKey firmware and applications are open source. The device only accepts signed firmware updates and verifies firmware integrity each time it starts.
LWallet.com.ua is a full-fledged online store in Ukraine specializing in devices for storing digital assets.
Our store has one of the widest selections of such devices in the country. We deliver to any city in Ukraine. We do not just sell devices — we also help customers set them up and provide advice. All products come with a warranty because we are confident in the quality of what we sell.
We give a manufacturer’s warranty and change any faulty device within a year.
Yes, of course. We will help you set up the device if you run into any difficulties. You can contact us by phone through our hotline or write to us in the chat on our website.
We deliver to any city of Ukraine. When you check out the order, you will be able to choose the nearest point of issue to you.
Yes, you can pay the courier or pay at the pickup point when you receive the order. You can also pay in advance by bank transfer.
Yes, we only sell original products purchased directly from the manufacturer.
You can buy the product directly from the manufacturer, but in that case, you will need to wait until the item is delivered to Ukraine. This can take from one week to one month. We usually ship the product on the day of the order. Also, if the device fails, you would need to return it to the manufacturer, which can take additional time. Visit the manufacturer’s website
| Brand | |
|---|---|
| Color | |
| Manufacturer country | |
| Warranty | |
| Connection | |
| Compatibility |
Add a review
Show only reviews in English (0)
Be the first to review “OnlyKey DUO”
Related products
Updating…
There are no reviews yet.