OpenPGP in a Secure Key
Smart-token style OpenPGP identities with hardware-backed keys.- Developer signing keys
- Email encryption
- Bring up your PIV card
- Reproducible issuance across teams
Open source: hardware and software
For an open audit by all the community. Hosted at Github.It runs on any Raspberry Pico board or ESP32-S3.
What is Pico Keys?
Pico Keys is a set of firmwares ready to run on any Raspberry Pico or ESP32-S3 microcontroller.. Each firmware (Pico HSM, Pico Fido and Pico OpenPGP) follows separate standardized specifications with different purposes but with a single common premise: having a personal key device.
How to run the firmware?
Just download the firmware for your board and load it. It will convert your Pico device into a personal key. Just plug it in your USB and it will be identified by your OS automatically.
Which firmware do I need?
If you need to generate and store dozens of keys, then go for Pico HSM. If you are looking for a personal Passkey (Fido2) for secure logging, then go for Pico Fido. If you need to interface with PGP keys for secure e-mail, then go for Pico OpenPGP.
Do you provide the hardware?
No. You can acquire multiple boards mounting a RP2040, RP2350 or ESP32-S3 chip from different vendors. Our firmwares are ready to run on any board.
Which hardware is recommended?
For boards using either the RP2350 or ESP32-S3 chips, both are recommended. The RP2350 stands out with a larger One-Time Programming (OTP) region, providing additional space for storing secure keys and configurations, and is likely to offer greater support for future updates. However, the RP2040 is not advisable for applications requiring hardware security, as it lacks built-in security features essential for robust protection.
Is it really free of charge?
Yes! The Community Edition is AGPLv3 and completely free. If you plan multi-user production use, OEM redistribution or an internal “HSM/auth” service and don’t want AGPLv3 disclosure obligations, choose the Enterprise license.
Which licenses do you offer?
We keep it simple:
- Community (AGPLv3, free)
Perfect for learning, labs and prototypes. Modify and use freely. If you distribute changes or run a modified network service, just share the source. No warranty/SLA. - Enterprise (proprietary)
For real-world deployments without AGPLv3 disclosure. For internal use or OEM/service.
Community (AGPLv3)
Open core for labs and personal use.
Enterprise (commercial, on-demand options)
Base license lets you run in production without AGPLv3 disclosure. Optional modules can be added case-by-case:
Start making your keys more secure
Never is too late to start to keep your keys safer. It is time to start
START TODAY