An ESP32 board running compatible firmware can act as a FIDO authenticator, but that does not make it a FIDO-certified security key. The difference is assurance: with a DIY build, you are responsible for the hardware, firmware, configuration and upkeep; certification applies to a specific product and its assessed scope.
What “FIDO2 security key” means
FIDO2 combines WebAuthn, the browser or platform API used by websites and apps, with CTAP, the protocol through which an external authenticator communicates with a client. Depending on the authenticator and host, CTAP connections can use USB, NFC or Bluetooth Low Energy (BLE). Support for a transport or feature must be checked for the particular device and service; it is not guaranteed just because something is called a security key.
As an Amazon Associate I earn from qualifying purchases.
What an ESP32 build can do
Suitable firmware can make an ESP32-class microcontroller perform FIDO authenticator functions. The open-source Pico FIDO2 project documents support for ESP32 devices, including a build path for ESP32-S3 boards. That is evidence of project-level capability, not a guarantee that every ESP32 board or firmware build works, nor that the resulting device is certified. See the Pico FIDO2 project documentation for its supported hardware and build instructions.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →A DIY key can be useful for learning, prototyping or experimenting with authentication. But the builder must assess whether the specific board, firmware, setup and relying party meet the intended use. A successful build or login proves functionality in that context; it does not establish the security assurance or broad compatibility of a certified product.
#1 Best Overall
- Keypad 4x4, 16 keys, 2 pieces
- Membrane matrix keypad
- Removable adhesive paper on the back => easy to stick on the flat surfaces
- Keypad for Arduino, ESP32, ESP8266, Raspberry Pi, or any 5V or 3.3V microcontroller.
- Tutorials for Arduino and ESP32 are provided
What certification adds
The FIDO Alliance says, “FIDO certification measures the compliance of products against FIDO specifications and globally recognized security and performance standards.” Certification is tied to a product and its applicable scope, rather than inherited by every device that can speak the protocol. Check the FIDO Certified Products Directory for the exact model, and verify that its listed certification and features meet your requirements.
Do not rely on “FIDO2” wording alone as proof of certification. Conversely, certification is not a claim that a key is invulnerable: security still depends on the implementation, configuration, scope of the assessment and your threat model.
Rank #2
- The Keypad library allows development board to read a matrix type keypad. 4×4 numeric keypads are widely used in project which requires the user to give command to the system or to feed in some data.
- You don't need the outer two pins on the left and right for wiring. It's the inner 8 pins that matter.
- If you solder on a header, we highly recommend laying down some flux on the pads first, inserting the header pins, then soldering
- The standard Keypad library for arduino works out of the box with this particular device.
- If you have any problem, please do as follow: click "DIYmalls"(you can find "Sold by DIYmalls" under Buy Now button), in the new page, click "Ask a question".
Secure boot helps, but does not certify a key
ESP32-S3 project documentation describes Secure Boot and Secure Lock support. Espressif says, “The Secure Boot feature ensures that only authenticated software can execute on the device.” Secure boot can help protect the boot chain and, when correctly configured, software updates. It is a platform protection, not a FIDO certification; having the feature available does not mean it is enabled or configured correctly on a given build. Read Espressif’s ESP32-S3 Secure Boot documentation alongside the firmware project’s instructions.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11How the options differ
| Question | DIY ESP32 authenticator | Certified commercial key |
|---|---|---|
| Can it support FIDO authentication? | A compatible project documents FIDO authenticator behavior for supported ESP32 hardware; verify the exact board and firmware. | Check the product’s features and certification entry for the exact model. |
| Is certification established? | No. Protocol support or project features do not establish FIDO certification. | Verify the exact model in the FIDO Certified Products Directory and confirm the relevant scope. |
| Who manages setup and maintenance? | The builder: hardware compatibility, flashing, firmware provenance, configuration and storage handling. | The vendor supplies a product and documentation; the user must still follow its guidance and the service’s compatibility requirements. |
| Which connections work? | Depends on the board, firmware, host and service. | Depends on the particular key’s connector or radio and support from the host and service. |
Certification scope can also be firmware-specific. For example, Yubico’s statement about Level 2 certification applies specifically to YubiKey firmware 5.7 and later; it should not be generalized to every YubiKey model or firmware version. See Yubico’s certification explanation and check the exact product listing.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Which should you choose?
Choose a DIY ESP32 build for experimentation
- Use a board and firmware combination explicitly supported by the project, such as its documented ESP32-S3 route.
- Follow the project’s build and flashing instructions, and understand how the device is configured before using it with accounts that matter.
- Treat successful authentication as proof of operation, not proof of certification or suitability for every service.
Choose a certified key when assurance is the priority
- Look up the exact product model in the FIDO Certified Products Directory.
- Check the relevant certification scope and any firmware-version qualifications.
- Confirm that the key’s USB, NFC or other transport and features work with the sites, devices or organization where you intend to use it.
Neither label removes the need to check compatibility and security requirements. The important distinction is that a DIY ESP32 build is an implementation you must evaluate, while a certified key is a specific product assessed under a defined certification program.
Quick Recap
Best Value
- 【5-SET SOFT KEYPAD KIT (5 KEYPADS + 5 I2C ADAPTERS)】Includes 5 flexible soft 4x4 matrix keypads (16 keys each), 5 I2C adapters to simplify connections, and a storage container — suitable for multiple projects or backups.
- 【SOFT MEMBRANE KEYPADS WITH EASY MOUNTING】Each keypad has a flexible design with double-sided adhesive tape on the back for attachment to project boxes, desks, or enclosures — for custom interfaces in robotics, security systems, or prototypes.
- 【GPIO-SAVING I2C ADAPTERS】The included adapters enable I2C communication using just 2 GPIO pins (SDA and SCL) instead of the traditional 8, freeing up pins on your microcontroller. Compatible with Raspberry Pi, ESP32, and more.
- 【WIDE COMPATIBILITY】Keypads and adapters support 3.3V to 5V operation for a wide range of MCUs. Easy to program with libraries like Keypad_I2C for quick setup.
- 【VERSATILE APPLICATIONS】Use these 4x4 keypads for numeric entry, menu navigation, or custom controls in IoT devices, home automation, smart locks, and educational projects. Soft, responsive keys provide tactile feedback in a compact form.
Rank #4
- Keypad 3x4, 12 keys, 2 pieces
- Membrane matrix keypad
- Removable adhesive paper on the back => easy to stick on the flat surfaces
- Keypad for Arduino, ESP32, ESP8266, Raspberry Pi, or any 5V or 3.3V microcontroller.
- Tutorials for Arduino and ESP32 are provided
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
