Tunnlix Key

Studio render of the revised Tunnlix Key enclosure, assembled from the supplied base, top, and button STL files

A USB security key built on RP2350.

Open-source FIDO2 firmware for the Seeed Studio XIAO RP2350.

Explore the source

A PIN. A physical confirmation.

Case print downloads

Sign in with a physical key.

Tunnlix Key brings passkeys to a device you carry with you. Connect it over USB-C, enter your PIN when asked, and press the button to sign in.

The same key can hold credentials for different accounts. Each service gets its own credential, so you can carry one device between computers without copying those credentials to each machine.

Accounts and SSH.

Sign in to your accounts

Use a passkey on supported websites and apps, or register the key as an extra sign-in method where the service offers it. Your PIN unlocks the key; a physical press confirms you are there.

32 discoverable passkeys, plus sealed credentials that do not use those slots.

Connect over SSH

Use the key with OpenSSH for server access. The supported ecdsa-sk and ed25519-sk key types bring the same physical confirmation to an SSH session.

ES256 and Ed25519 support in the RP2350 firmware.

Manage stored passkeys

View stored passkeys, update their account details, and remove ones you no longer use through a compatible credential manager. Set your PIN and adjust its minimum length.

PIN retry limits and permission-scoped authorization are built in.

Make your own key.

Start with a Seeed Studio XIAO RP2350, a normally open button, and a USB-C cable. Build the firmware, connect the button, and finish it with the printed case below. The source is MIT licensed.