Pico FIDO

Turns a $4 Pico into a FIDO2 security key for passkeys and two-factor login on Google, GitHub and more.

Chipnik catalog@chipnik-catalog

What you need

Board
One of 3 boards: ESP32-S3 DevKit, Raspberry Pi Pico, Raspberry Pi Pico 2
Parts
Nothing else, the board is enough

Pico FIDO makes a Raspberry Pi Pico or an ESP32-S3 work as a FIDO2 and U2F security key. Use it for passkeys and two-factor login on sites like Google, Microsoft and GitHub, with resident keys, PIN protection and OATH one-time codes. Press the BOOTSEL button to confirm each login. Original project by polhenarejos on GitHub, AGPL-3.0. Chipnik hosts the release binaries unchanged so you can flash them from the browser.

A homemade key has no secure element, so the secrets are protected less than in a store-bought key. It is great for learning and as a spare key; keep your main recovery options elsewhere.

Firmware files come from the v8.0 release.

After flashing

  • The board restarts by itself when flashing is done.
  • If nothing happens, press the RST (EN) button once.

Flashing failed or the board behaves oddly

Versions

8.0.0 added to Chipnik 2026-11-05

Release v8.0 of polhenarejos/pico-fido, files unchanged. Release notes on GitHub

More for ESP32-S3 DevKit

All projects
Pico FIDOFlash it