tech from europe

Nitrokey 3

🇩🇪 DE

Open-source security key for FIDO2, OpenPGP and PIV with German-made hardware

GDPROpen sourceCommon Criteria EAL 6+
Nitrokey 3 is a German-made hardware security key with open-source firmware and hardware. It supports FIDO2/WebAuthn, FIDO U2F, one-time passwords, OpenPGP smart-card functionality, and PIV for secure authentication and encryption. Models vary in connectors and NFC support. The secure element is Common Criteria EAL 6+ certified, and firmware updates are possible.

Features

Authentication

  • FIDO2/WebAuthn for passwordless sign-in
  • U2F for two-factor authentication
  • Up to 100 discoverable passkeys (3A Mini) or 30 (NFC models)

Smart-card cryptography

  • OpenPGP Card for signing, encryption and authentication
  • PIV for business smart-card applications
  • S/MIME support for email encryption

Passwords and OTP

  • Password Safe for stored passwords and OTP credentials
  • One-time password generation
  • Up to 50 entries in Password Safe

Device security

  • PIN-protected storage of cryptographic keys and certificates
  • Common Criteria EAL 6+ certified secure element
  • Open source and open hardware

Administration and updates

  • Nitrokey App 2 for device management
  • pynitrokey/nitropy tools for CLI management
  • Firmware updates available

Compatibility

  • Windows, Linux, macOS, Android and iOS support
  • Microsoft Entra ID support for credential provisioning
  • KeepassXC support for unlocking

EU Trust Profile

What we verified against public sources, last checked 2026-11-10. Every point links to its evidence.

  • European legal entityNitrokey GmbH, Teltow (DE)

    Registered at Amtsgericht Potsdam, HRB 32882 P.

    Evidence →
  • Open source

    Firmware repository is public, but the specific license is not confirmed in the provided sources.

    Evidence →
  • Local-language support

    Email support is explicitly offered in German, English, and French.

    Evidence →

We list only what we could verify against a public source on the check date. A point that is absent was not established either way — it is not a finding against the vendor. The vendor's own information prevails.

Work at Nitrokey 3?

This badge is free for every vendor we list and has no bearing on the order of any list. It is issued on the basis of a verified European headquarters (DE) and the compliance points we checked against public sources — the date on it is the date we last checked.

Nitrokey 3 — verified European company on tech-from-europe.euNitrokey 3 — verified European company on tech-from-europe.eu

Embed code

<a href="https://tech-from-europe.eu/product/nitrokey-3"><img src="https://tech-from-europe.eu/badge/nitrokey-3.svg" alt="Nitrokey 3 — verified European company on tech-from-europe.eu" height="164"></a>

Plain HTML: an SVG served from our domain, with no JavaScript, no cookies and no tracking of your visitors. Add ?style=card for the wide variant, or swap .svg for .png where a CMS refuses SVG. Whether you nofollow the link is your call — we do not check.

Claiming the profile with a work email gets you the artwork as PNG, a form for correcting anything we got wrong, and a note whenever we re-check you.

Claim this profile →

Something wrong on this page? Write to hello@tech-from-europe.eu with a public link and we will re-check it.

Reviews

Recurring themes, synthesized from public reviews across portals.

What users value

  • Multi-protocol support: FIDO2/WebAuthn, U2F, OpenPGP, PIV and OTP in one device
  • Open hardware and firmware design with German production and SE050 secure element
  • Wide platform compatibility across desktop and mobile operating systems
  • Multiple form factors: USB-A, USB-C, Mini and NFC variants
  • Straightforward everyday use for basic FIDO2 authentication
  • Touch-button activation and PIN protection for device-level security
  • One-time purchase with no subscription fees

Where users see room to improve

  • · Advanced use cases (OpenPGP, PIV, SSH) require steeper setup and command-line tools
  • · Early adopters reported shipping delays, incomplete features and slow stabilization
  • · Passkey capacity varies by model and firmware, with some users citing a 17-credential limit

Integrations

Microsoft Entra IDWebAuthn/FIDO2OpenPGP/GnuPGKeepassXC

Nitrokey 3: frequently asked questions

Which tools does Nitrokey 3 integrate with?
Nitrokey 3 connects with Microsoft Entra ID, WebAuthn/FIDO2, OpenPGP/GnuPG and KeepassXC.

Feature, pricing and integration details are based on web research (as of 2026-11-10), without guarantee, errors are possible. The vendor's website prevails.