The U2F Garden

Token2

Token2, founded in Geneva, Switzerland, ships a deep catalog of FIDO2 keys at lower prices than Yubico. Their PIN+ family enforces PIN complexity rules on the device itself rather than relying on the relying party. Higher tier keys add PIV smart card and OpenPGP, putting them in roughly the same protocol territory as the Yubikey 5 at a fraction of the cost. Token2 ships frequent firmware updates and publishes a feature support matrix that tracks what each release adds.

This key is no longer recommended for use.

Token2 PIN+ Release 2 (legacy)

The original PIN+ release. Now superseded by Release 3, kept for reference.
More information
Certified by the FIDO Alliance as conforming to FIDO2 standardsSupports Hashed One-Time-Password generationSupports WebAuthn discoverable resident credentials, the building block of passkeysSupports Time-based One-Time-Password generationConforms to the U2F Authenticator and WebAuthn standard

Token2 PIN+ Release 3

PIN+ with PIV smart card and OpenPGP on top. Release 3.3 is the current top end Token2 key.
More information
Certified by the FIDO Alliance as conforming to FIDO2 standardsSupports Hashed One-Time-Password generationSupports WebAuthn discoverable resident credentials, the building block of passkeysConforms to PKCS11 SmartCard interface standardsSupports Time-based One-Time-Password generationConforms to the U2F Authenticator and WebAuthn standard

Token2 PIN+Bio3

Token2’s biometric PIN+ key, released in 2025, adds a fingerprint sensor on top of the PIN complexity model.
More information
Allows or requires biometric authenticationCertified by the FIDO Alliance as conforming to FIDO2 standardsSupports Hashed One-Time-Password generationSupports WebAuthn discoverable resident credentials, the building block of passkeysSupports Time-based One-Time-Password generationConforms to the U2F Authenticator and WebAuthn standard