Token2 Pico - RP2350-Based FIDO2 Security Key
A compact and affordable FIDO2 / WebAuthn security key based on the Raspberry Pi RP2350 microcontroller. Designed for phishing-resistant authentication, development, testing, and everyday secure logins. Ideal as a primary or backup hardware key for users who want standards compliance without premium secure-element pricing.
Key Highlights
- FIDO2 / WebAuthn compliant (CTAP1 & CTAP2)
- Passwordless and phishing-resistant authentication
- Physical button for user presence verification
- Preloaded firmware, user-upgradeable
- Open and developer-friendly design
- Excellent price-to-performance ratio
- Fully manageable with Token2's open-source tools (FIDO2/passkey and OTP)
Management Tools
This key can be fully managed using Token2's open-source tools, covering both FIDO2 / passkey and OTP management:
- • Token2 Companion - Rust edition (Keyroost) – cross-platform desktop tool for Windows, macOS, and Linux.
Keyroost - • Libre Key Companion – Android app (a USB-A to USB-C adapter may be needed).
Libre Key Companion
System Compatibility
- AGOV – Not compatible
- ID-Austria – Not compatible
- Entra ID – Requires disabling attestation checks
- Other systems – Check with us before ordering
Good to Know
This device does not include a hardware secure element or attestation, making it best suited for general use, development, and controlled environments, rather than high-assurance enterprise deployments. Both FIDO2/passkey credentials and OTP profiles can be managed using Token2 Companion - Rust edition (Keyroost) on desktop and the Libre Key Companion Android app.