Purism
Librem Key
$59
The Purism Librem Key is a phishing-resistant hardware authenticator engineered for individuals and organizations that demand verifiable, audited security. Sourced through Exotec's authorized reseller channel, every unit ships sealed from the manufacturer with full warranty support and discreet, signature-required delivery worldwide. Configuration assistance and enterprise deployment guidance are available on request.
- Completely open source in both hardware and firmware for maximum transparency
- Integrerad tamper-evident boot-indikator i samarbete with Purism PureBoot
- Secure storage of OpenPGP keys for email encryption and file signing
- Support for RSA up to 4096 bits and Elliptic Curve Cryptography
- Physical network kill switch to prevent automatic remote attacks
- Compatible with SSH authentication for secure server administration
Discreet shipping
Authorized reseller
30-day returns
Specifications
- Brand
- Purism
- Model
- Librem Key
- Interface
- USB 2.0 Typ-A
- Kryptografisk Standards
- OpenPGP Smart Card V2.1
- Arkitektur
- STM32F103 Baserad
- Maximum key length
- RSA 4096-bit / ECC NIST P-256, P-384
- Dimensions
- 48mm x 19mm x 7mm
- Weight
- 6 g
- Warranty
- 12 months
Frequently asked
- Does Librem Key support FIDO2 / WebAuthn?
- Yes. Librem Key implements FIDO2 / WebAuthn and works as a passkey for any service that accepts a security key.
- Does it support OpenPGP and PIV?
- Purism keys in this listing implement OpenPGP for code-signing and email, and PIV for smart-card login. Confirm the exact applet set on the spec sheet above.
- USB-A, USB-C, NFC or Lightning?
- Connector type is listed in the specifications. Choose the form factor that matches your laptop and phone.
- Can I use Librem Key with iPhone?
- Yes — over NFC or via the Lightning / USB-C model. Apple supports security keys for Apple ID and for any WebAuthn site in Safari.
- Does Librem Key work with Google, Microsoft, GitHub, AWS?
- Yes. All major identity providers accept FIDO2 hardware keys including Purism.
- What happens if I lose the key?
- Best practice is to enroll two keys on every account. We sell two-packs for exactly this reason.
- Is the firmware open source?
- Some Purism keys ship open-source firmware; others closed. Spec sheet above lists firmware status per model.
- Can Librem Key sign git commits?
- Yes via OpenPGP — pair with gpg-agent or with sigstore for keyless variants.
- How is Librem Key shipped?
- Discreetly via tracked international courier. Packaging carries no Exotec or product branding.
- Do you ship to my country?
- We ship worldwide except to OFAC-sanctioned jurisdictions. See our Restricted Countries policy for the current list.
