Nitrokey 3 is a physical security key for two-factor and passwordless authentication, cryptographic key storage, and password management. FIDO2 and U2F work over USB and NFC; FIDO2 use cases include passwordless login and SSH login. Authentication uses a PIN and a touch of the device’s physical button. OpenPGP Card and S/MIME store private keys for asymmetric cryptography and email encryption, while PIV supports business-focused smartcard use; these are listed with secure element support. The SE050M secure element is Common Criteria EAL 6+ certified up to the OS level. Password Safe can hold up to 50 entries with login, password, comment, and OTP fields. The device stores cryptographic keys and certificates, not ordinary data. Nitrokey describes its hardware and software as open source. It works with current browsers and is managed with Nitrokey App 2 or nitropy, not Nitrokey App 1. Listed systems include Windows, macOS, Linux, BSD, Android, and iOS, with some mobile support noted in the FAQ. Plans include the Nitrokey 3A Mini at 54.00 EUR per once, Nitrokey 3A NFC at 60.00 EUR per once, and Nitrokey 3C NFC at 65.00 EUR per once.
Who it is for
It suits people who need a physical key for authentication, cryptographic keys, certificates, or a small password store. It may also suit organizations using PIV smartcards or FIDO2 login workflows.
What is good
- FIDO2 and U2F over USB and NFC
- Supports passwordless and SSH login
- Password Safe holds up to 50 entries
- Secure element certified Common Criteria EAL 6+
- Hardware and software are open source
What to know first
- No free plan
- Does not store ordinary data
- Managed with Nitrokey App 2 or nitropy, not App 1
Verdict
Nitrokey 3 combines authentication, cryptographic functions, and a limited-entry password store in a physical key. Buyers should check the listed one-time prices and confirm their device and management-tool requirements.
Nitrokey 3 plans and pricing
All plansCompared on security keys
- Free plan
- No
- Authentication standards
- WebAuthn, CTAP2/FIDO2, CTAP1/FIDO U2F 1.2, HOTP RFC 4226, TOTP RFC 6238, HOTP verification
- NFC support
- Yes
- USB connector
- usb-a
- Device management
- vendor app
- Operating systems
- Windows, macOS, Linux, BSD, Android, iOS

