OnlyKey 3.0.4 Firmware

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• Support for Authlite OnlyKey Programmer v2.4.7

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_3_0_4_STD.txt
f895100a2f828b66ec5335fd676ef659daf87d51bfeecca5fb8bf9b7c8e259bd

Signed_OnlyKey_3_0_4_IN_TRVL.txt
0c4d2f33c5b934c422b7bc9642d0f696c5674c2cf307756c5dee0933a70cd745

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
3.0.4 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 3.0.3 Firmware

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• Fix for Yubikey OTP with public key shorter than 16 bytes.
• Default for newly provisioned OnlyKey and OnlyKey DUO challenge-mode is now set to press only, no challenge code required.

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_3_0_3_STD.txt
b92b2e9744a98933a330cdca41d8933657b90e80c41f8cf9bacb0d47c253a128

Signed_OnlyKey_3_0_3_IN_TRVL.txt
8646de8758d4e23c070ae86f276d7677899d76c6d96691a6d2a091eae91b0b1c

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
3.0.2 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 3.0.2 Firmware

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• Support for Yubikey OTP with public key shorter than 16 bytes.
• Fixes for resident key backup/restore.
• Fix for PD Mode where if sysadmin mode is enabled device is unusable in PD Mode.
• Default for OnlyKey DUO challenge-mode is now set to press only, no challenge code required.

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_3_0_2_STD.txt
d547df850e963ca0c49f2b04dd91cd6dd845c00affbe3b9b552042d5ad196ce0

Signed_OnlyKey_3_0_2_IN_TRVL.txt
2d5d3fb1d6393766fca1d1cce4580de60d76aa4a70c9a457f9b03466bc055bf4

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
3.0.2 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 3.0.1 Firmware

This release fixes Samsung device support issues for OnlyKey DUO

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_3_0_1_STD.txt
2e35145ec335b6a78603e6a557c917ae83cab716c8bb66bde3a4a58c88deca50

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
3.0.1 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 3.0.0 Firmware

This release includes initial OnlyKey DUO support

OnlyKey 2.1.2 Firmware

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• FIDO2 Improvements
• Support for node-onlykey API
• Better touch sensitivity with touch sense recalibration
• Backup verification (there is a backup verify button in the new OnlyKey app now to verify backup file integrity)
• Added support for 24 independent HMAC SHA1 slots (Future Authlite support)

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_2_1_2_STD.txt
61092f5371080649dd435c8df18d2d35778632962184e5d6ba93a3295af8c2c9

Signed_OnlyKey_2_1_2_IN_TRVL.txt
a0a07e2d9046267e863b0d59ec8587f8ff1f5cbca0e9e2fbfab910cb5ee658b7

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
2.1.2 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 2.1.1 Firmware

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• Added support for Authlite for enterprise Windows AD 2-factor
• Added support for 24 independent YubiKey OTP slots
• Added support for ed25519-sk FIDO2 keys with OpenSSH
• Fixed compatibility issue with FIDO2 Microsoft accounts and Chrome browser
• Better GPG agent support
• Better sysadmin mode support
• Added support for after OTP TAB (Required for Authlite)
• Fixed lock button for newer Macs (CTRL+SHIFT+Q instead of CTRL+SHIFT+EJECT)

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_2_1_1_STD.txt
c218a2dc29a1dbb92cf9ccc958bb73ab81d687db0a42c14ab42efd52c165be3c

Signed_OnlyKey_2_1_1_IN_TRVL.txt
d4757d005fc16d5b047987f43ad9c1346ba59ed896c960eaceadd85740e2cb97

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
2.1.1 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey 2.1.0 Firmware

2.1.0 Release Notes

We are pleased to announce that the new production OnlyKey firmware is now available! For more information on upgrading OnlyKey firmware read guide here. This release includes:

• OnlyKey GPG agent support.
• WebCrypt 3.0 support. Webcrypt 3.0 to be released later this month.
• Enhanced FIDO2 support (improved usability and ability to manage individual FIDO2 resident keys)
• Sysadmin mode - SysAdmin mode permits OnlyKey to type almost any combination of characters such as Ctrl-Alt-Del, then enter usernames/passwords or system commands.
• Primary Profile and Secondary Profile LED Color - OnlyKey supports a primary and secondary profile, switching between the two is now even easier. Hold down button #3 for 5 seconds to lock OnlyKey to switch profiles. Recognizing which profile you are logged into is now easier with profile colors, OnlyKey has Green light for Primary profile and Blue light for Secondary profile.
• Customizable HMAC Keys - By default HMAC keys are random, these can now be customized for HMAC challenge-response. This feature is used for things like KeePassXC support.
• Improved OnlyKey Agent SSH support - OnlyKey SSH agent now supports both derived keys and stored keys for users who wish to use a single key to log into multiple servers. PGP (RSA and ECC) key import support will be added in our next OnlyKey SSH agent release. This allows users to import existing keys to OnlyKey for secure SSH. Alternatively, OpenSSH supports OnlyKey — read more about that here.

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_2_1_0_STD.txt
c4c2fd05c89fa164dae069c57deea78f2adc665c69e4e671e7483c2658339c9a

Signed_OnlyKey_2_1_0_IN_TRVL.txt
e1a75c28dac1c9894e371a2767aa754b61f5039a785966cadb086b5c095675ba

Release File Name Information

Signed = Cryptographically signed release file
OnlyKey = Target device
2.1.0 = Version major, minor and patch
STD/IN-TRVL = Firmware Edition, read more

OnlyKey Firmware Beta 8

Beta 8 Release Notes

We are pleased to announce that the latest and greatest OnlyKey firmware is now available! This release includes:

• Windows 10 support (Fixes 1903 compatibility issue)
• Android support (with OpenPGP message/file encryption support)
• FIDO2 (supports Windows Hello and Azure AD)
• File encryption (using Firefox, Chrome, Edge(new), Brave web browsers or a native app to encrypt/decrypt files)
• PINs can now be changed!
• An easy config mode for initial setup, no app needed
• Challenge-response (HMACSHA1 - we are working with the KeepassXC project to add OnlyKey support)
• Lock button - Lock OnlyKey and computer with touch of button on OnlyKey
• Message encryption improvements - Better integration with Keybase, you can now use our search tool to find Keybase user's and easily send secure messages and files. Easily receive secure messages and files from anyone using our web app.
• Auto firmware upgrades - The app prompts when new firmware is available and allows automatic upgrade of firmware.

In order to get started trying out the new OnlyKey features, follow our upgrade guide here.

SHA 256 checksums

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_Beta8_STD_Color.txt
559f4b36a02685153767c8789879ced26af0453313ca62656bfee0e4be66f326

Signed_OnlyKey_Beta8_IN-TRVL_Color.txt
9b46c624048726a0b105c1dc74a5026131d3cfa33a2135f955cf0994d848519a

OnlyKey Firmware Beta 7

Beta 7 Release Notes

We are pleased to announce that the latest and greatest OnlyKey firmware is now available! This release includes a new, easier to use desktop app for Windows/Mac/Linux to be used in conjunction with the latest OnlyKey firmware. With this release, we have made OnlyKey easier to use and more secure.

In order to get started trying out the new OnlyKey features, follow our firmware upgrade guide.

Why Upgrade?

This release includes a lot of improvements. Most notably, after upgrading your OnlyKey, you can load future updates directly in the app without the need to backup and restore!

Here is the short list of other major improvements in this release:

• Better touch sense on OnlyKey buttons using automatic touch sense calibration.
• Backup Passphrase support - Backup’s may be securely encrypted with a passphrase.
• Two profile support - By setting two PINs you can have two profiles to store up to 24 accounts.
• Automatic firmware and app update notifications - The OnlyKey app can now let you know when there are updates available.
• Seamless firmware upgrades - Signed firmware can now be loaded directly through the app without wiping account data (thanks to our new blockchain bootloader).
• Better FIDO U2F support

SHA 256 checksums

Hex format firmware files (to be loaded with Teensy loader)

OnlyKey_Beta7_STD_Color.cpp.hex
fa2ccd6925fa9e3f72f1d7b40db0c7f33732fe0a8f55fb8a3f315ad9ac05ef87

OnlyKey_Beta7_STD_Original.cpp.hex
356e25e337dad8fe1798592d5c674ddd44fac1340e054df9d43176f7e59406b2

OnlyKey_Beta7_IN-TRVL_Original.cpp.hex
7467910663f72bf7604be776a381a72d881df5afcc5a0da697aaedbfa315a0f9

OnlyKey_Beta7_IN-TRVL_Color.cpp.hex
cac81a1d5606c3939c45c5b0ebeab8f9d01c510e20a00123ad35314fc1006754

Signed Txt format firmware files (to be loaded in OnlyKey app)

Signed_OnlyKey_Beta7_STD_Color.txt
e7371ab4799751cde6b4701a43cd1ce7b2a0e9aae19140895f879837b4e54f52

Signed_OnlyKey_Beta7_STD_Original.txt
70f70292eeca9c2aebc6fdaf5aad775e3c471dea53e0ec9bd108a00738d6b043

Signed_OnlyKey_Beta7_IN-TRVL_Original.txt
cde7fab87063f94ad0e5fb7c48981e87b82669b1c3abbeeafa4ebcbc83a9f62a

Signed_OnlyKey_Beta7_IN-TRVL_Color.txt
3cb2d92a68060e83ccda96c1b70e28de3516c2f7cd261407510f0da7d46cdf6