Your password will leak eventually. Everyone's does.

A Nitrokey means it doesn't matter. Plug it in, touch the button, you're in — and a stolen password is worthless without the key in your hand.

Phishing stops working. The key verifies the website's domain cryptographically before it releases anything. A fake login page can look pixel-perfect and still get nothing.

One key, everything: FIDO2 and WebAuthn for passwordless login. U2F and one-time passwords for two-factor. OpenPGP for encrypted email and files. PIV for smart card login. SSH keys that never leave the device.

Built to be checked, not trusted. Firmware written in Rust and published as open source, so anyone can audit it for backdoors. A Common Criteria EAL 6+ certified secure element holds your keys — generated on-device, and they cannot be extracted.

Also included: physical touch button, four-colour LED status indicator, hardware random number generator, signed firmware updates.

Which one? 3C is USB-C. 3A is USB-A. Everything inside is identical — pick the port on your laptop.

Made in Germany. Registered open source hardware.

Note: these are the No-NFC variants. NFC models are sold separately.