CanoKeys (Hardware Security Key)

Site Development Tool Suggestions
1

Check this box to affirm you have no conflict of interest.

on

Website

Short description

CanoKeys is a security key. It uses a USB Type C interface.

Why I think this tool should be added

CanoKeys stand out as a very balanced solution. They use high‑quality, tamper‑resistant hardware; fully support FIDO2; do not allow private key extraction; and (being typically priced above $35) also support OpenPGP and PIV (which can cover S/MIME use cases). Best‑case, they also offer USB‑C connectivity, NFC (via NDEF), TOTP secret storage, and updateable firmware via open‑source tools.

Section on Privacy Guides

security keys

2

Hardcoded description; the author should update :)

lol

On a more serious note: Where in the world do you even buy these? They’re USB-A only?

3

Did some research for fun. Author stated that the keys are available on Taobao (I couldn’t get this website to search for a key without an error) and if you’d like to purchase directly from the creators you need to write them an email. USB A for now, USB C version “coming soon”.

I appreciate open source but it all looks so unprofessional I couldn’t even purchase one for research.

2 Likes
4

Reckon they also use hardcoded secrets :smiley:

5

this page seems funky https://dfu.canokeys.org/
at least someone could try flashing some firmware

6

I found the Taobao offical store canokeys canary it seems the 3.0.0 beta version have some problem with u2f that it will not work, and is cheaper than the lastest version https://github.com/canokeys/canokey-product here’s the changelog