Tools for FIDO security keys

FIDO2 Keys can be managed and configured using standard operating systems tools. No special tool is needed to start using the FIDO keys, as most modern operating system and browsers allow setting a PIN when required, and both authentication and enrollment are handled through the browser's standard API. Additional tools may only be needed for specific tasks, such as increasing the minimum PIN, viewing or deleting passkeys, enforcing PIN entry, resetting, and other advanced configurations.

Token2 Companion App v2 - All-in-One Management App

We are now completing the development of our next version of the Companion app, an all-in-one application designed to manage multiple security features including FIDO2, PIV, and OTP functionality. This unified solution will streamline device management with a single interface.

Token2 Companion App v2

Open Source Tools

Token2 develops both proprietary and open-source applications for managing FIDO2 security keys. While the original Companion applications were released as closed-source software, newer management tools are published as open-source projects to provide greater transparency, community collaboration, and broader hardware compatibility.

Both product lines are actively maintained and provide similar core functionality. Proprietary applications include Token2-specific capabilities, while the open-source alternatives emphasize transparency, auditability, and broad platform support.

Project	Description
fido2-manage Windows, Linux & macOS	Open-source, cross-platform tool for managing FIDO2 security keys over USB and NFC: passkeys, PIN and PIN policy, fingerprints and factory reset. It comes with Token2 Key Manager, a graphical front-end that also adds PIV certificate and OTP / OATH account management. Native builds for all three desktop platforms, no Python required, and it works with FIDO2.1 keys from any brand. View project
Libre Key Companion Android & iOS	Open-source mobile companion application for configuring and managing FIDO2 security keys on Android and iOS devices. Android \| iOS
Keyroost Windows, Linux & macOS	Open-source cross-platform desktop companion application for managing FIDO2 security keys, written in Rust. View project

Our existing separate tools and applications remain available and will continue to be maintained. For users seeking manufacturer-agnostic solutions, fido2-manage is our recommended starting point: a single native application for Windows, macOS and Linux that works with any FIDO2.1 device, with the Token2 Key Manager GUI also covering the PIV and OTP applets of Token2 PIN+ keys. The Companion app, on the other hand, is optimized specifically for Token2 devices and their full feature set.

We also offer Keyroost, an open-source desktop application for managing FIDO2 keys, written in Rust. It is cross-platform by design.

Managing native FIDO Functions

Discover tools that leverage the native FIDO2 functionality of your keys for secure authentication and access control.

fido2-manage & Token2 Key Manager
fido2-manage is an open-source, cross-platform tool for managing FIDO2 security keys over USB or NFC. It lets you view device information and storage, list and delete passkeys (resident keys), set or change the PIN, increase the minimum PIN length, enforce user verification, enroll and manage fingerprints on biometric keys, and factory-reset the FIDO applet. It ships as a command-line tool together with Token2 Key Manager, a graphical application that additionally provides PIV certificate management and OTP / OATH-TOTP/HOTP account management. Native builds are available for Windows (portable, no installation), macOS (signed .dmg) and Linux (.deb, AppImage or portable), with no Python runtime required. This tool can be used with any FIDO2.1 security key, not only the ones from Token2; with FIDO2.0 keys only basic information is shown.
Standard Windows control panel tool
You can use the standard Windows control panel tool to manage your key, as long as you run Windows 10 build 1903 or later. Please note that the standard control panel applet has some limitations: i.e. it cannot remove individual fingerprints in the Bio FIDO2 Keys and cannot manage TOTP profiles.
Chromium-based web browsers
If you are using macOS or Linux, you can manage your FIDO2 keys using the tool integrated into the latest Chromium based browsers, such as Google Chrome (starting from v80).

Mobile platforms

iOS Companion App
Optimized for Token2 devices. In addition to passkey management, the app enables you to set and use TOTP profiles on an iPhone (via NFC). The latest releases of our keys (starting from Release3) allow managing passkeys via USB as well.
Android Companion App
Optimized for Token2 devices. In addition to passkey management, the app enables you to set and use TOTP profiles on an Android device (via NFC or via USB/OTG)
Libre Key Companion
Open-source Android companion app providing FIDO2 and passkey management features. Built for transparency and interoperability, it supports key operations via NFC and USB/OTG, following the same core functionality principles as the proprietary companion apps.
FIDO Bridge - Authnkey
This fully open-source project provides a workaround that effectively brings CTAP2-style capabilities to NFC keys on Android by acting as a passkey provider / Credential Manager service. It handles the correct communication with your FIDO2 key or card over NFC. In addition to solving the NFC limitation, it provides the basic functionality needed by regular users, such as setting or changing the PIN and viewing or removing credentials.

Partner solutions

Discover integrated partner solutions that extend Token2 FIDO2 security keys for enterprise IAM, observability, and credential lifecycle management.

^{partner solution}

Corbado Observe

Corbado Observe is the passkey observability layer from Corbado, the passkey intelligence platform for enterprise CIAM teams. It helps identify why hardware passkey logins fail (device, browser, ceremony-level insights) on Token2 and other FIDO2 keys, and integrates with existing IdP stacks.

Corbado

^{partner solution}

Versasec

Credential Management System (vSEC:CMS) for enterprise credential lifecycle management and secure issuance workflows. Supports Token2 FIDO2 security keys as part of its ecosystem.

vSEC:CMS

FIDO2/Passkeys Demo

Test your FIDO2 key or platform authenticator with our online FIDO2/Passkeys Demo tool