Free tools Windows power users keep installed
One-click scans. No signup required.
An ESP32 can run firmware that implements FIDO2 authenticator behavior, but that does not make the board a FIDO-certified security key. The key distinction is between being able to perform the protocol, having platform protections such as secure boot, and having a finished product evaluated through FIDO Alliance certification.
What “FIDO2” means for a security key
FIDO2 combines WebAuthn and CTAP. WebAuthn is the browser or platform API used by a website to request authentication; CTAP lets an external authenticator, such as a USB security key, communicate with the client. Depending on the authenticator and host, CTAP connections can use USB, NFC, or Bluetooth Low Energy (BLE).
So, an ESP32 project can participate in a real FIDO authentication flow if its firmware implements the necessary authenticator behavior and the specific board and connection work with the client. That is protocol capability—not evidence that the board or a build made from it has been certified.
What an ESP32-based key can do
Implement authenticator behavior with suitable firmware
The open-source Pico FIDO2 project documents support for ESP32 microcontrollers, including a build path for ESP32-S3. A compatible build can therefore make a supported ESP32 board act as a FIDO authenticator. Support is specific to the project, board, and firmware; it should not be generalized to every ESP32 or development board.
#1 Best Overall
- Keypad 4x4, 16 keys, 2 pieces
- Membrane matrix keypad
- Removable adhesive paper on the back => easy to stick on the flat surfaces
- Keypad for Arduino, ESP32, ESP8266, Raspberry Pi, or any 5V or 3.3V microcontroller.
- Tutorials for Arduino and ESP32 are provided
Use platform protections such as secure boot
Espressif documents secure boot as a way to ensure that only authenticated software executes on a device. Its security documentation also describes verification in the boot chain and for OTA updates. These protections depend on enabling and configuring them correctly. Secure boot can strengthen a device’s software integrity, but it does not test or certify the finished authenticator against FIDO requirements.
Require the builder to manage the implementation
With a DIY build, the builder is responsible for choosing a supported board, obtaining and flashing firmware, setting security options, understanding how credentials are stored, and tracking firmware provenance and updates. Project instructions demonstrate a build route; they do not establish that every resulting device is configured securely or will work with every website.
Rank #2
- The Keypad library allows development board to read a matrix type keypad. 4×4 numeric keypads are widely used in project which requires the user to give command to the system or to feed in some data.
- You don't need the outer two pins on the left and right for wiring. It's the inner 8 pins that matter.
- If you solder on a header, we highly recommend laying down some flux on the pads first, inserting the header pins, then soldering
- The standard Keypad library for arduino works out of the box with this particular device.
- If you have any problem, please do as follow: click "DIYmalls"(you can find "Sold by DIYmalls" under Buy Now button), in the new page, click "Ask a question".
What certification adds
FIDO Alliance certification is a product-level evaluation, not a label earned simply by using a FIDO-compatible protocol. The Alliance says, “FIDO certification measures the compliance of products against FIDO specifications and globally recognized security and performance standards.” The scope belongs to the product and relevant firmware, so check the exact model rather than relying on a product page’s general “FIDO2” wording.
Use FIDO’s Certified Products Directory to look up the exact model and applicable certification information. Certification does not mean that a key is invulnerable, nor does it automatically prove compatibility with a particular service or satisfy every organization’s policy. Those questions still depend on the model, its supported features, and the requirements of the relying party.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Compare the two options before choosing
| Question | DIY ESP32 authenticator | Certified commercial key |
|---|---|---|
| Can it perform FIDO authentication? | A compatible firmware project documents FIDO authenticator behavior for supported ESP32 devices; verify the board and build. | Check the exact product’s documented FIDO support and certification entry. |
| Is it certified? | Do not infer certification from protocol support, project features, or secure boot. | Certification is product-specific; verify the exact model in the FIDO directory. |
| Who handles setup and maintenance? | The builder handles board compatibility, flashing, security configuration, storage, and firmware provenance. | Follow the manufacturer’s documentation and the service or organization’s compatibility guidance. |
| Which connection works? | Depends on the board, firmware, and host; CTAP’s possible transports do not mean every build supports USB, NFC, and BLE. | Confirm the particular key’s connector or radio and the target service’s support. |
How to choose for your use
Choose a DIY ESP32 build for experimentation
An ESP32-S3 development board is a plausible starting point when the goal is learning, prototyping, or exploring authenticator firmware. Confirm that the exact board is supported by the chosen project, follow its build documentation, and treat security configuration and ongoing maintenance as part of the project. Buying supported hardware does not turn it into a certified key.
Choose a certified key when assurance matters
For routine account protection or a workplace requirement, identify the needed certification scope and supported connection first, then select an exact model listed in the FIDO directory. Confirm that the service or organization accepts its transport and features. For example, Yubico’s Level 2 certification statement is specifically scoped to YubiKey firmware 5.7 and later; it should not be generalized to every YubiKey model, firmware version, or other vendor’s key.
Quick Recap
Best Value
- 【5-SET SOFT KEYPAD KIT (5 KEYPADS + 5 I2C ADAPTERS)】Includes 5 flexible soft 4x4 matrix keypads (16 keys each), 5 I2C adapters to simplify connections, and a storage container — suitable for multiple projects or backups.
- 【SOFT MEMBRANE KEYPADS WITH EASY MOUNTING】Each keypad has a flexible design with double-sided adhesive tape on the back for attachment to project boxes, desks, or enclosures — for custom interfaces in robotics, security systems, or prototypes.
- 【GPIO-SAVING I2C ADAPTERS】The included adapters enable I2C communication using just 2 GPIO pins (SDA and SCL) instead of the traditional 8, freeing up pins on your microcontroller. Compatible with Raspberry Pi, ESP32, and more.
- 【WIDE COMPATIBILITY】Keypads and adapters support 3.3V to 5V operation for a wide range of MCUs. Easy to program with libraries like Keypad_I2C for quick setup.
- 【VERSATILE APPLICATIONS】Use these 4x4 keypads for numeric entry, menu navigation, or custom controls in IoT devices, home automation, smart locks, and educational projects. Soft, responsive keys provide tactile feedback in a compact form.
Rank #4
- Keypad 3x4, 12 keys, 2 pieces
- Membrane matrix keypad
- Removable adhesive paper on the back => easy to stick on the flat surfaces
- Keypad for Arduino, ESP32, ESP8266, Raspberry Pi, or any 5V or 3.3V microcontroller.
- Tutorials for Arduino and ESP32 are provided
Do not decide from the word “FIDO2” alone
- Check the precise board and firmware for a DIY build, or the exact product model and certification scope for a commercial key.
- Check the connection your computer or phone can use and the service’s supported methods.
- For an ESP32, assess how secure boot and other relevant protections are enabled and maintained; a platform feature is not product certification.
- For organizational use, follow the organization’s stated assurance and compatibility requirements rather than assuming a project build qualifies.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
