Nitrokey 3A NFC, USB-A, Security Key, Made in Germany

Nitrokey 3A NFC, USB-A, Security Key, Made in Germany

SKU: NK3AN

The new Nitrokey 3 is the best Nitrokey we have ever developed. It offers NFC, USB-A for the first time. The Nitrokey 3 combines the features of previous Nitrokey models: FIDO2, one-time passwords, Op

55,00 €

incl. VAT , plus

Currently out of stock

Description
Notify me when this item is available

The Nitrokey 3A NFC is the best Nitrokey ever developed. It combines FIDO2, one-time passwords, OpenPGP smart card, Curve25519, password manager, Common Criteria EAL 6+ certified secure element, and firmware updates. Trustworthy thanks to open source — quality made in Germany.

At a Glance

Connector	USB-A
NFC	Yes
Protocols	FIDO2, FIDO U2F, OpenPGP, S/MIME, PIV, OATH-TOTP, OATH-HOTP
Secure Element	SE050, CC EAL 6+ certified
Firmware	Open source, written in Rust
Touch Button	Yes
LED	Four-color activity indicator
Certifications	FCC, CE, RoHS, WEEE, OSHwA
Manufacturer	Nitrokey (Germany)

Use Cases — Private & Corporate

Passwordless Login — Log in to Microsoft services, Nextcloud and more without passwords
Two-Factor Authentication (2FA) — Secure login to Google, Facebook, and hundreds more via FIDO2, U2F, or OTP
Phishing Protection — FIDO automatically checks the domain, protecting against phishing attacks
Mobile Usage — NFC for secure access on Android and iPhone
Encrypt Data and Emails — GnuPG, OpenPGP, S/MIME, Thunderbird or Outlook

Use Cases — Enterprise & IT

Windows Passwordless Logon — Microsoft Entra ID managed Windows computers
SSH Server Administration — PIN-protected SSH key securely in Nitrokey
IoT Protection — Integrate Nitrokey for remote maintenance and product authenticity
BIOS Integrity — Verified Boot with colored LED indication (green = OK, red = tampered)

Security Technology

Firmware written in memory-safe Rust programming language
Based on Trussed framework for security-critical embedded systems
Hardware: LPC55S6x or nRF52 with Secure Boot, ARM TrustZone, PUF
Secure Element SE050 (CC EAL 6+) for cryptographic storage
Fully open source — independently verifiable

Technical Details

Authentication: WebAuthn, CTAP2/FIDO2, CTAP1/FIDO U2F 1.2, HMAC-Based OTP, Time-Based OTP
Algorithms: RSA 2048-4096, NIST P-256/P-384/P-521, Ed25519/Curve25519, brainpoolP256-512, AES-128/256
Hash: SHA-256, SHA-384, SHA-512
TRNG (Physical Random Number Generator)
Signed firmware updates
OS: Windows, macOS, Linux, BSD, Android, iOS

Contact data

E-Mail