polhenarejos/pico-fido

Health v2 · maintenance only

Adoption not part of the score

1446 stars · 225 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Open-source firmware that turns a Raspberry Pi Pico (RP2040/RP2350) or ESP32-S3 microcontroller into a FIDO2 passkey authenticator, supporting CTAP 2.3, WebAuthn, U2F, OATH/TOTP, and vendor extensions like vaulted credential export. It is part of the PicoKeys ecosystem and is licensed under AGPL-3.0.

Use cases

• turn a Raspberry Pi Pico into a FIDO2 security key
• hardware-backed passkey for passwordless login
• two-factor authentication with a cheap USB token
• store TOTP and OATH codes on a physical device
• WebAuthn authenticator for browser sign-in
• backup and export passkeys between devices
• hardware-backed SSH and email signing alternatives

When to choose

• you want a FIDO2/U2F authenticator on a $4 microcontroller instead of a commercial YubiKey
• you need discoverable credentials, PIN verification, and OATH/TOTP in one device
• you want open-source, auditable firmware for your security key
• you need credential export/import via Pico Vault or backup with 24 words

When to avoid

• you need a general-purpose smart card, HSM, or OpenPGP token - use Pico HSM or Pico OpenPGP instead
• you require the strongest hardware protection on RP2040, which lacks Secure Boot/OTP key storage
• you need a commercial license without AGPL-3.0 source disclosure obligations
• you want a plug-and-play product rather than flashing firmware yourself

Facets

application · maturity active

auth cryptography security embedded security embedded-systems privacy developer-tools embedded iot cross-platform cli fido2 passkey webauthn u2f ctap totp hardware-authenticator raspberry-pi-pico esp32 usb-security-key yubikey-compatible firmware otp hmac-secret resident-keys

Member repositories

For agents

markdown · JSON · MCP: product_card(name="polhenarejos/pico-fido")