fidont

use your android phone as a fido2/webauthn key

Stop paying for YubiKeys, use your Android phone as a FIDO2/WebAuthn key instead.

Mockup

It works as:

a passkey provider for apps and sites on the phone itself a key for browsers on other devices, you scan their passkey QR code with the app an NFC key, just tap the phone on a reader a USB key for everything else, through the dongle or the helper on Linux a Bluetooth key for browsers on a computer that you paired the phone with Your keys are made inside the phone's secure hardware (StrongBox, or the TEE on phones without it) and nothing can copy them out of there. Using one always takes your fingerprint or PIN.

There is no sync, so if you lose the phone or remove the screen lock they are GONE, unless you turned on backup first.

Note

FIDO2/WebAuthn compatible, but not FIDO certified. Sites that only accept certified keys will reject it.

License

GPL-3.0