28-06-2026

Libre Key Companion: manufacturer-agnostic security key manager for Android and iOS

We're happy to announce Libre Key Companion, a new open-source companion application for Android and iOS that lets you manage hardware security keys and smart cards from any manufacturer.



updates tools

read more

17-06-2026

An open-source, cross-platform way to manage your Token2 keys: Companion App - Rust edition

Token2 Companion - Rust edition - an open-source, cross-platform desktop tool for managing Token2 keys, and keys from other vendors too. It runs on Windows, macOS, and Linux, and the whole thing is open source: you can read it, audit it, build it, and extend it.



updates tools

read more

04-04-2026

Understanding FIDO User Verification Modes and the always_uv Setting

Token2 R3.3 and later FIDO2 keys enforce user verification by default with always_uv = true, improving security, though some platforms and apps like Windows 10, macOS, and certain legacy clients may fail to handle this override correctly.



05-03-2026

Introducing TOTPVault — self-hosted TOTP management for teams

Most TOTP apps work by distributing copies of the secret to every person who needs access — fine for personal accounts, but for shared service accounts it means MFA secrets scattered across people's phones with no clean way to revoke access when someone leaves.



21-12-2025

Android, NFC, and the Missing Piece of WebAuthn

For years, Android users have faced a frustrating limitation—Android does not support CTAP2 over NFC. This means no PIN verification and no discoverable credentials (passkeys) when using NFC, and therefore limited to simple U2F-style flows without user verification. That said, there finally seems to be a solution.