SoloKeys Achieves FIDO2 Certification, Thanks to Mozilla

Emanuele Cesena
SoloKeysSec
Published in
2 min readOct 11, 2019

We’re proud to announce that we’ve achieved FIDO2 certification for Solo, our open source security key. Thank you Mozilla! SoloKeys was awarded a grant by the Mozilla Open Source Support (MOSS), with the intent to achieve certification and set the foundations for an open source reference implementation of the CTAP2 protocol, which is an integral part of the FIDO2 specifications.

Solo, the first open source FIDO2 security key. Now FIDO2 certified.

With this news, Solo joins the family of certified security devices, being the first to be fully open source, hardware and firmware. Released with dual license MIT + Apache2, Solo source code can be used for free in commercial and hobbystic hardware products. With support from Mozilla and the FIDO Alliance, we envision that access to a reference implementation will speed up adoption and foster innovation.

There’s more! We have two other products, the NFC security key Solo Tap and the tiny security key Somu. Both products share the same firmware with Solo, formally passed functional tests during the last interoperability event in Lisbon in September, and we’re now working to have these products FIDO certified as well.

FIDO2 is a set of standards that enables easy and secure logins to websites and applications via biometrics, mobile devices and/or FIDO Security Keys. FIDO2’s simpler login experiences are backed by strong cryptographic security that is far superior to passwords, protecting users from phishing, all forms of password theft and replay attacks.

“We’re thrilled for this milestone. It took us 4 months to go from an idea to shipping our first product, including passing all FIDO2 functional tests. Formally achieving certification has taken significantly longer and we have to thank Mozilla for their grant, and our friends at the FIDO Alliance for the patience and support. I want to call out the teams of Nitrokey, Tomu and Nth Dimension as early adopters of our FIDO2 technology. We hope that having an open source solution, now FIDO2 certified, will move innovation faster and will help us all reach the end goal of replacing passwords and defeating phishing.” — Conor Patrick, CEO, SoloKeys.

SoloKeys FIDO2 Certificate

--

--

Emanuele Cesena
SoloKeysSec

Forging the Everdragons2 NFT. Former security at Pinterest.