Top hardware security keys compared

About Top hardware security keys compared

This security-key ranking compares 17 hardware options through purchase price, protocol coverage, connector choice, biometric capability, and support access. The main trade-off is flexibility against specialisation. A key with more connectors and protocols can suit more devices, while a lower-cost model may provide a narrower feature set. Prices are hardware purchase prices, and renewal prices are not part of these product offers. Readers should therefore compare the listed price with device compatibility and supported security protocols rather than treat the products as subscription services. The category's typical price is €30.69, with a middle band from €21.92 to €33.55. Token2, Thetis, and Google Titan Security Key stand out through connector and protocol coverage, while protocol choices vary further down the ranking.

How we picked

This ranking weighs cost and offer at 40% each, while trust contributes 20%. The comparison covers 17 security-key brands and uses listed purchase prices, connector choices, supported protocols, biometric availability, and support channels. Product prices are treated as hardware purchase prices rather than recurring subscription prices. Public brand and product information supplies the offering details, while the ranking statistics provide category benchmarks for price, connector support, biometric availability, and customer support. Listed product models, prices, features, connector formats, and support routes determine each member's position. Partners would appear first, but none of the listed members is marked as a partner, so the brands follow score order. A key with broad connector support and a useful protocol set can offer more practical value than a lower-priced model with narrower compatibility. Biometric unlock also receives category weight, as do the available support routes. Help centre access carries 100%, email carries 82.4%, and phone support carries 47.1%. Community support receives 47.1%, while chat support receives 0%. The comparison does not convert hardware purchase prices into renewal prices because the category is centered on products rather than recurring plans.

Our top picks

1. 1. Token2: best for top-pick

   Token2 earns the top-pick label in this ranking by pairing listed prices of €7 to €37 with free and budget models, USB-A, USB-C, and NFC, and support for FIDO2, U2F, OTP, and PIV. Biometric unlock adds another practical differentiator, while email, phone, and help-centre support give buyers several routes for assistance. It is based in Switzerland under TOKEN2 Sarl. Compared with Thetis, Token2 has a lower listed price range, similarly broad protocol coverage, matching connector options, and the added benefit of phone support. Both offer biometric unlock, so price and support access help separate them in this ranking.

   • Price: €7 to €37
   • Protocols: Fido2, U2f, Otp, and 1 more
   • Connectors: USB-a, USB-c, NFC

   Pros

   • Fees of €7 to €37 start below Thetis at $24.99 to $49.99 and Google Titan Security Key at $30 to $35.
   • The full connector set of usb a, usb c and nfc covers laptops and phones with the same key.
   • Protocol support spans fido2, u2f and otp, so one device handles sites, apps and smartcard or card-reader logins.
   • Biometric unlock is supported, so a fingerprint can replace typing a PIN at the prompt.
   • Support runs on email, phone and help centre, which is more reach than a single channel.

   Cons

   • The firmware is closed source, so the code inside the key cannot be inspected by buyers.
   • Biometric unlock is not universal across the lineup, so some models rely on a PIN alone.
   • Prices are listed in euro rather than dollars, unlike SoloKeys Solo 2 at $35 and Thetis at $24.99 to $49.99.
   • Software support is limited to web browser, Windows and macOS, with no client named outside that set.

2. 2. Thetis

   Thetis places highly in this ranking because it combines biometric unlock with USB-A, USB-C, and NFC across listed prices of $24.99 to $49.99. Its FIDO2, U2F, OTP, and PIV coverage matches the broad protocol set used by many services, while email and help-centre support provide two assistance routes. Thetis is a US budget option. Compared with Google Titan Security Key next in the ranking, Thetis supports U2F, OTP, and PIV in addition to FIDO2, plus biometric unlock. Google Titan Security Key has a tighter listed price range, but Thetis offers broader protocol coverage and more connector formats within its stated range.

   • Price: $24.99 to $49.99
   • Protocols: Fido2, U2f, Otp, and 1 more
   • Connectors: USB-a, USB-c, NFC

   Pros

   • The protocol list is fido2, u2f and otp, covering FIDO2 alongside the older U2F, OTP and PIV standards on the same device.
   • Biometric unlock is standard, so a fingerprint replaces a typed password on the services that offer it.
   • Connectors come in usb a, usb c and nfc, so the same key suits a desktop, a laptop and a phone.
   • Budget keys start below Google Titan Security Key at $30 to $35 and below the SoloKeys Solo 2 at $35.

   Cons

   • Support runs on email and help centre only, so a buyer whose key fails on a work laptop reaches a mailbox rather than a voice.
   • The top of $24.99 to $49.99 runs above Google Titan Security Key at $30 to $35 and above the SoloKeys Solo 2 at $35, so the range is not the cheapest choice for every reader.
   • Token2 lists €7 to €37, which starts under the Thetis range, though that quote sits in a different currency to $24.99 to $49.99.
   • Most of the field sits at or below the €46.24, and the budget range crosses that line.

3. 3. Google Titan Security Key

   Google Titan Security Key ranks near the front of this ranking through its listed purchase price of $30 to $35, USB-A and USB-C connectors, NFC, and FIDO2 support. Its help centre provides a dedicated support route, and Google was founded in 1998. The key sits between Thetis and SoloKeys Solo 2 because it combines a focused protocol list with a relatively tight price range. Compared with Thetis, its protocol set is narrower, but it still covers the main physical connector formats. Compared with SoloKeys Solo 2, it adds NFC while both support USB-A and USB-C.

   • Price: $30 to $35
   • Protocols: Fido2
   • Connectors: USB-a, USB-c, NFC

   Pros

   • One-time purchase at $30 to $35 with nothing to renew, so the cost stays flat over the life of the key.
   • Connector set of usb a, usb c and nfc covers full-size, small and wireless use on a single device.
   • Backed by Google, founded in 1998, a vendor with a long operating history.
   • Support is documented through help centre, which is the most common support channel among security keys on the site.

   Cons

   • A one-time buy of $30 to $35 buys one device, so a keyring for several accounts means buying several keys.
   • Support runs on help centre only, so anyone wanting live chat or a phone line has a thin option.
   • The protocol list reads fido2, and Token2 keys carry a wider protocol set for anyone who needs more than FIDO2.
   • At $30 to $35 the key costs more than Token2 at €7 to €37, so buyers shopping purely on price have cheaper picks.

4. 4. Nitrokey

   Nitrokey ranks in the middle of this ranking because it supports USB-A, USB-C, NFC, FIDO2, U2F, OTP, and PIV, with a free model and listed prices of €32 to €65. Its support mix is particularly broad, covering email, phone, a help centre, and a community. Nitrokey is a German company, and its product is positioned as a free option. Compared with SoloKeys Solo 2, it adds NFC, OTP, and phone support, although its listed price range is higher. Compared with Yubico, it also supports OTP and PIV, while Yubico has biometric unlock as yes and a narrower protocol list.

   • Price: €32 to €65
   • Protocols: Fido2, U2f, Otp, and 1 more
   • Connectors: USB-a, USB-c, NFC

   Pros

   • The keys cover fido2, u2f and otp and come in usb a, usb c and nfc, so a team can standardise across the range instead of mixing suppliers.
   • The hardware carries Common Criteria EAL 6+ and independent security audit by Cure53, and the project is open source, so buyers can check the design for themselves.
   • NitroChat has a free plan with no advertising, and it runs on Windows, macOS and Linux.
   • Nitrokey GmbH in DE gives a named counterparty for procurement, and support runs on email, phone and help centre.

   Cons

   • NitroChat carries a free plan, but fresh sign-ups are switched off until further notice, so a new account has to wait.
   • Keys at €32 to €65 sit above Token2 at €7 to €37, which weighs on buyers counting hardware cost closely.
   • Support runs on email, phone and help centre, with no live chat among the listed routes.

5. 5. Google

   Google ranks lower in this ranking with USB-A, USB-C, and NFC, FIDO2 and U2F support, and a free product model. Its support channels are a help centre and community, and the company is based in the US. The product facts are positioned around the Google Titan Security Key. Compared with CryptoTrust immediately above it, Google adds NFC and U2F while CryptoTrust includes OTP but has only USB-A and USB-C. Compared with Google Cloud below it, Google is listed as free and uses FIDO2 and U2F, while Google Cloud has a listed price range and a broader connector-focused protocol list.

   • Free plan: Yes
   • Platforms: Android, Chrome, Web
   • Passkeys: Yes

   Pros

   • A free plan is included, so readers can start on stored credentials and passkeys without a subscription.
   • Passkeys are supported, and security keys speak fido2 and u2f across usb a, usb c and nfc for anyone who prefers a physical key.
   • The paid Google One plan sits at €2.09, under the €7.89 monthly level across the brands tracked.
   • Credentials in transit are protected with HTTPS and TLS, and on-device encryption is on offer.
   • The subscription bundles storage, with 15 free on the free account, and parental controls adding screen time and web filter.

   Cons

   • Encryption that only the account holder can read is not offered, so readers who want the vault held outside provider control have to accept a different arrangement.
   • The provider gathers and studies user content in order to run the services and make them better, including filtering spam and malware and personalising results, content and ads.
   • Support runs on help centre and community, against 82.2% of the brands tracked offering email, so reaching a person takes more effort.
   • Platforms are Android, Chrome and Web, a narrower spread than the Windows, Windows Server and macOS list at ESET Brasil.

6. SS6. SoloKeys Solo 2

   SoloKeys Solo 2 enters this ranking as a budget-focused USB security key with a listed price of $35. It supports FIDO2, U2F, and PIV, while email, help-centre, and community channels give buyers several support options. Its biometric unlock is listed as no, which distinguishes it from Token2, Thetis, and Yubico. Compared with Google Titan Security Key immediately above it, SoloKeys adds U2F and PIV but uses only USB-A and USB-C. Compared with Nitrokey below it, SoloKeys has a single listed price and biometric unlock as no, while Nitrokey offers NFC, OTP, and phone support.

   • Price: $35
   • Protocols: Fido2, U2f, Piv
   • Connectors: USB-a, USB-c

   Pros

   • Open source is a yes, so the hardware design and firmware of the Solo can be reviewed by anyone.
   • Protocol support covers fido2, u2f and piv, so the same token handles modern web sign-in, legacy sites and PIV workplace logins.
   • Connectors are usb a and usb c, covering the port shapes found on current desktops and laptops.
   • Support for Windows, macOS and Linux means the same key works across major desktop systems and both mobile platforms.

   Cons

   • Biometric unlock is a no, so unlocking rests on a PIN typed on the key rather than a fingerprint check.
   • Support runs on email, help centre and community, with no phone line or live chat listed for a stuck setup.
   • There is no free plan, and at $35 the Solo sits in the budget class, so a light user still pays the full device price.
   • Thetis keys run $24.99 to $49.99, a range that overlaps $35, so the Solo gives no clear price edge while skipping biometric unlock.

7. 7. Yubico

   Yubico appears in this ranking with biometric unlock as yes, USB-A, USB-C, and NFC, plus a listed price of €35.09. Its FIDO2 and U2F coverage keeps the feature set focused, while a help centre, email, and phone provide several support routes. Yubico is based in Sweden and is positioned as a budget option. Compared with Nitrokey immediately above it, Yubico has a narrower listed price point and protocol set but adds biometric unlock. Compared with OnlyKey below it, Yubico includes NFC and phone support, while OnlyKey supports OTP and has biometric unlock listed as no.

   • Price: €35.09
   • Protocols: Fido2, U2f
   • Connectors: USB-a, USB-c, NFC

   Pros

   • A single €35.09 purchase, with no subscription or renewal to track
   • Works on Windows, macOS and ChromeOS with usb a, usb c and nfc in the same device
   • Biometric unlock, so a fingerprint can approve a use of the key
   • Support runs through help centre, email and phone
   • Named as a listed public company, Yubico AB (publ), so the maker is disclosed

   Cons

   • FIPS certification is no, so regulated buyers have a gap to close
   • Token2 lists keys at €7 to €37, a lower entry point than €35.09, so the cheapest option sits elsewhere
   • Protocol support is listed as fido2 and u2f, so a service asking for anything outside that list will not accept the key
   • The range is listed as budget, so expect simple materials rather than a premium body

8. O8. OnlyKey

   OnlyKey sits in this ranking as a USB security key with a listed price of €49.95, USB-A and USB-C connectors, and FIDO2, U2F, and OTP support. Email, a help centre, and a community provide support access, and the product is backed by CryptoTrust LLC. Its biometric unlock is listed as no. Compared with Yubico immediately above it, OnlyKey adds OTP but drops NFC and phone support from the listed feature set. Compared with CryptoTrust below it, the product facts are effectively the same because both entries use the same key, price, connectors, protocols, and support routes.

   • Price: €49.95
   • Protocols: Fido2, U2f, Otp
   • Connectors: USB-a, USB-c

   Pros

   • Open source firmware, paired with a logging policy in which the company states it holds no customer keys or sensitive data.
   • The Duo carries usb a and usb c in the same unit, so machines with either port are covered by the same purchase.
   • It speaks fido2, u2f and otp and also handles totp codes, so the same key covers security keys, authenticator codes and passwords.
   • The PIN is protected in hardware, and the device wipes after repeated failed unlock attempts.
   • Support runs on email, help centre and community, with a help centre in front of email and a community forum.

   Cons

   • Biometric unlock is no, which leaves the PIN and its wipe rule carrying the security of the device.
   • The free plan is no, so the only route to the features is buying hardware at €49.95.
   • The price runs above Token2 at €7 to €37 and the Google Titan Security Key at $30 to $35.
   • Support runs on email, help centre and community only, with no phone line among them.

9. GC9. Google Cloud

   Google Cloud completes this ranking with USB-A, USB-C, and NFC, a free product model, and a listed price of $30 to $35. Its protocol list includes FIDO2, NFC, USB-A, and USB-C, while email and a help centre provide support. The company is based in the US and is represented by Google Commerce Limited. Compared with Google immediately above it, Google Cloud has a stated purchase price while Google is listed as free, and Google Cloud names email support alongside its help centre. It follows the same broad connector coverage but is placed last in this ranking's order.

   • Jurisdiction: IE
   • Protocols: FIDO2, NFC, USB-A, and 1 more
   • Platforms: Android, iOS, ChromeOS

   Pros

   • Offers physical keys that support USB-A, USB-C and NFC connections
   • Works across Android, iOS and ChromeOS for everyday authentication needs
   • Includes FIDO2 support for phishing resistant authentication workflows

What to look for

Match every device connector

Both USB-A and USB-C carry 100% and 100% in this category, while NFC carries 73.3%. Match the connector on your key to the port on the laptop, phone, or desktop you use most before buying.

Review protocol coverage

FIDO2 support is common, while U2F, OTP, and PIV support separates products. Read each key's protocol list against the services and sign-in workflows you need to protect, since a narrower list can limit where the key is accepted.

Decide on biometric unlock

Biometric unlock carries 60% when a key offers it and 40% when it does not, and members in this category differ on it. Decide whether a fingerprint check matters for the devices you sign in on.

Check support access

A help centre carries 100% and email carries 82.4%, the strongest routes in this category. Phone and community support carry their own factors, so check the channels you would actually use.

Balance price against features

The category spans free and budget positioning, so weigh the hardware price against the connectors and protocols included. A cheaper key can cover fewer devices, and a pricier one can cover more, so the price alone rarely settles the choice.

Frequently asked questions

Top hardware security keys compared by country

• Canada
• France
• Germany
• Italy
• Japan
• Spain
• United Kingdom
• United States

The data behind this ranking

All data and the CSV