OnlyKey DUO

CTAP 2.1

Supports CTAP 2.1, including features like enforced PIN complexity, credBlob, largeBlob, and alwaysUv

More Info

FIDO2 Certification

Certified by the FIDO Alliance as conforming to FIDO2 standards

More Info

FIDO L1 Certification

Certified by the FIDO Alliance to meet L1 Security Standards

More Info

HOTP passwords

Supports Hashed One-Time-Password generation

More Info

PIN Authentication (physical)

Features a physical PIN pad for authentication

Resident Cryptographic Keys

Supports WebAuthn discoverable resident credentials, the building block of passkeys

More Info

Resident ECDSA keys

Supports ECDSA discoverable keys

Stored passwords

Supports stored, static passwords, usually configured with a vendor-specific application

Timed OTP passwords

Supports Time-based One-Time-Password generation

More Info

U2F Authentication

Conforms to the U2F Authenticator and WebAuthn standard

More Info

YubiOTP

Enables use of Yubico YubiOTP one-time-passwords

More Info

The OnlyKey DUO is a smaller variant of the OnlyKey with both a USB-A and a USB-C connector. The feature set is the same as the original: on device PIN entry, password storage, FIDO2 and U2F, Yubico OTP, OATH TOTP and HOTP, PGP, and SSH.

The DUO is the better choice for travellers and laptop users who need to alternate between USB-A docks and USB-C ports.