Training Example: Nitrokey – Review the Data, Give Your Score & Compare to the Real AI Evaluation

[IMG: FCK BIG TCH]
[IMG: 10 years of Nitrokey]

[H4] Nitrokeys

[IMG: nitrokeys]

[IMG: button]

[H4] NitroPhone

[IMG: nitrophone]

[IMG: button]

[H4] NitroTablet

[IMG: nitrotablet]

[IMG: button]

[H4] NextBox

[IMG: nextbox]

[IMG: button]

[H4] NitroWall

[IMG: nitrowall]

[IMG: button]

[H4] NitroPC

[IMG: nitropc]

[IMG: button]

[H4] NitroPad

[IMG: nitropad]

[IMG: button]

[H4] NetHSM

[IMG: nethsm]

[IMG: button]
Explore more

[H2] Selection of our customers

Yes , you are the best company ever seen, thank you so much for your attention!July 2022

At least i got the chance to tell you, how much i appreciate the work all of you are doing. Privacy for sure is one pillar of democracy and freedom.November 2025

Your products are truly top-notch—please let your boss know (he/she is great!),September 2024

Please keep up the fight for privacy. The battles are only just beginning. Thanks for everything you guys do and stand for.May 2024

I have been using your products for a few years now and love them. So great work and thank you.June 2024

I'm very proud to be a Nitrokey customer. Keep up the great work guys/gals.September 2024

I couldn't live happily without Nitrokey... (customer from USA)April 2026

Probably the quickest and definitely the smoothest RMA process I've been through, thanks a bunch! And the NFC works great :-DJanuary 2023

NitroKey is an amazing company with a just and noble mission! Thank you guys for your great products, nitro meet server, and all around hard work!May 2020

Huge fan of your products after buying Nitrokey Pro 2 circa year ago.April 2020

[H2] News

[IMG: Nitrokey family]

[H3] Price Increase of Nitrokeys From 1 May
Dear Nitrokey Community!
23 April 2026

[H3] NetHSM Software Update 4.0: Scalable Clustering for High-Availability HSM
We are pleased to announce the largest software update to date for NetHSM: In addition to IPv6 support, NetHSM software 4.0 introduces native clustering. This allows multiple NetHSM devices to be interconnected into a redundant cluster that distributes and maintains the consistency of key data and remains operational even if individual devices fail.
02 April 2026

[IMG: NitroPhone easter promotion]

[H3] It's Time For a Digital Spring Cleaning. Get NitroPhone at an Easter Discount!
Want fewer data hoarders, less surveillance, and to break free from dependence? Now is the time. NitroPhone is the smartphone that truly belongs to you. Say goodbye to tracking, data theft, and dependence. Say hello to security, privacy, and open source.
Our Easter deals for you and your digital security:
26 March 2026

[H2] Be The first to know
Stay informed about the Nitrokey project, new models and firmware updates.

[H2] Confirm e-mail address

Contact us Via Online Shop
Register and log in at our online shop, submit a new ticket and manage existing tickets and sales orders.
Contact us Via E-Mail
Technical support, technical product questions, security bug reports:
Order, shipping, billing:
Wholesaler, reseller, bulk discounts:
General enquiries:

E-mail Encryption
You can send and receive encrypted email with [email protected], [email protected] and [email protected], as well as receive encrypted order confirmations, invoices and delivery confirmations after placing an order. To do this, follow these steps:
Send your PGP public key or S/MIME certificate as an attachment to [email protected]. The email address you use must be included in the PGP key or S/MIME certificate. S/MIME certificates are only accepted from common CAs but not from own CAs.
You will receive two email confirmations. If you do not receive any confirmation email or only one, either no PGP key and no S/MIME certificate could be extracted or they are issued for different email addresses than the email address you are using. In this case, check the instructions in point 1.
Download the respective PGP key or S/MIME certificate and use it for email encryption:
[email protected]: PGP, fingerprint: 3457 C618 BB48 B622 7C28 1CE9 656E AA95 7EB3 6009
[email protected]: PGP, S/MIME, fingerprint: 93E1 6D39 592C 82D1 88D7 EAC8 3945 9C07 1030 1914
[email protected]: PGP, S/MIME, fingerprint: B84E B67A 364F D0C2 14BB 91D0 A11B F14D BFD2 BCB0
[email protected]: PGP, S/MIME, fingerprint: B69C 4188 95D4 CED9 DFFF 5E77 29AC 2A67 A499 37DE

[H2] Be The first to know
Stay informed about the Nitrokey project, new models and firmware updates.

[H2] Confirm e-mail address

[IMG: Nitrokey family]
23 April 2026, 0 Comments
[H2] Price Increase of Nitrokeys From 1 May
Dear Nitrokey Community!
read more

02 April 2026, 3 Comments
[H2] NetHSM Software Update 4.0: Scalable Clustering for High-Availability HSM
We are pleased to announce the largest software update to date for NetHSM: In addition to IPv6 support, NetHSM software 4.0 introduces native clustering. This allows multiple NetHSM devices to be interconnected into a redundant cluster that distributes and maintains the consistency of key data and remains operational even if individual devices fail.
read more

[IMG: NitroPhone easter promotion]
26 March 2026, 0 Comments
[H2] It's Time For a Digital Spring Cleaning. Get NitroPhone at an Easter Discount!
Want fewer data hoarders, less surveillance, and to break free from dependence? Now is the time. NitroPhone is the smartphone that truly belongs to you. Say goodbye to tracking, data theft, and dependence. Say hello to security, privacy, and open source.
Our Easter deals for you and your digital security:
read more

13 March 2026, 0 Comments
[H2] Visit us at secIT From 18 to 19 March in Hannover
We are delighted to be exhibiting at secIT by Heise for the first time this year.
read more

[IMG: NitroPhone 10 models]
26 February 2026, 3 Comments
[H2] New: NitroPhone 10 Models
We are pleased to introduce the new, secure NitroPhone 10 models. As with the previous generation, there are four models:
read more

[IMG: christmas banner]
15 December 2025, 3 Comments
[H2] We're Giving Discounts of up to €200 – You're Gifting Security
Dear Nitrokey community,
The year is coming to an end, and we would like to take this opportunity to thank you all. We say thank you for your support, your trust, and for standing with us for digital freedom.
And because you can never celebrate security enough, we have a little gift for you at the end of the year:
Our Holiday Discount
More security – lower price. From now until December 31, 2025:
read more

[IMG: BIG TCH tracks. Nitrokey protects.]
28 November 2025, 0 Comments
[H2] Our Black Friday Special – 10% Discount on Everything
The Celebrations Continue: 10 Years of Nitrokey
read more

[IMG: NitroPad T480]
25 November 2025, 0 Comments
[H2] New: NitroPad T480 and T480s
We are pleased to announce two new laptops. The NitroPad T480 and T480s are now available in our shop. They replace our popular but now outdated X230 and T430 models and differ from them mainly in their more modern 8th generation processor, up to 64 GB DDR4 RAM, and fast NVMe PCIe 3.0 x2. In addition, the T480 and T480s are significantly lighter and thinner and both feature a 14" IPS screen.
read more

[IMG: 10 years Nitrokey]
04 November 2025, 0 Comments
[H2] 10 years of Nitrokey–A Decade of Digital Security
How time flies. Nitrokey was founded ten years ago with the mission of making digital security, data protection, and sovereignty accessible to everyone. Our goal is to develop the best open source security hardware – and we are world leaders in this field.
read more

01 October 2025, 0 Comments
[H2] NetHSM 3.0: Bitcoin Curve secp256k1, Brainpool, EJBCA, Performance
We are proud to release a new software update for the NetHSM with important features! This significantly expands the range of use cases in which NetHSM can be used.
read more

[H2] Pages
1
2
3
4
5
6
7
8
9
…
next ›
last »

[H2] Be The first to know
Stay informed about the Nitrokey project, new models and firmware updates.

[H2] Confirm e-mail address

[H2] Nitrokey enables

[H3] Secure Login
Login to websites (e.g. Google, Facebook) using secure One Time Passwords (OTP), U2F or ordinary static passwords. Login to computers and network services (e.g. SSH) using certificates.
read more
[H4] The Password is Dead

Passwords can be either difficult to remember or too short to securely protect important accounts. Traditional password systems have not been able to keep up with the increasing number of accounts needed for various websites nowadays. Passwords should be unique and the same one should never be used for multiple accounts. This renders passwords insecure and impractical to use.

Nitrokey aims to replace passwords by utilising the following strong authentication procedures:

[H4] One Time Passwords (OTP)

One Time Passwords (OTP) are similar to TANs and are used as a secondary security measure in addition to ordinary passwords. OTPs protect against identity theft, which means that if your password is compromised your account is still secured by the Nitrokey. Using a small tray icon application, your Nitrokey generates OTPs which are required in order to log in to configured websites and applications. There is a growing list of websites which can be used with Nitrokey's OTPs. The supported protocol are HMAC-based One-time Password Algorithm (HOTP, RFC 4226) and Time-based One-time Password Algorithm (TOTP, RFC 6238), which are compatible with Google Authenticator.

[H4] FIDO Universal 2nd Factor (U2F)

FIDO Universal 2nd Factor (U2F) is very secure, super easy to use, and may become the successor to OTPs. FIDO U2F uses cryptographic challenges which are signed by the Nitrokey U2F device. Account-specific keys are used to prevent user tracking and to protect your privacy. U2F doesn't require an additional tray application because some web browsers already support Nitrokey U2F (Firefox, Google Chrome, Internet Explorer with plugin). U2F is a new standard and is so far only supported by a few websites, but its acceptance is increasing.

[H4] Client Certificate Authentication

You can use your Nitrokey to administrate your servers securely via SSH, to access your Virtual Private Network via OpenVPN or IPSec and to log in to some websites via HTTPS or OpenID.

[H4] Password Safe

In cases where an ordinary password is required, Nitrokey provides a password safe to store passwords securely. It allows you to have individual passwords for each account and store them encrypted in the Nitrokey. Maximum 16 passwords.

[H3] Email Encryption
Encrypt your emails with GnuPG, OpenPGP, S/MIME or your favourite email client. Keep your secret keys secure on your Nitrokey.
read more
[H4] Emails are readable like postcards

If you do not take additional precautions, random system administrators can easily access your emails. It is also possible that your emails have already been accessed and stored by intelligence services. Cybercriminals are increasingly targeting email servers in order to launch phishing attacks on businesses and individuals. Email encryption prevents attackers or unauthorised users from reading your private emails.

[H4] Nitrokey aims to make email encryption as easy as possible

Nitrokey stores your secret keys securely on the device and protects them from malware and physical attackers. Nitrokey can be used with various types of email encryption software both easily and with minimal modifications. Windows, MacOS and Linux are supported, and device drivers are either preinstalled or installed automatically. GnuPG works out of the box in conjunction with Nitrokey and supports OpenPGP and S/MIME formats. PKCS#11 drivers are provided for integration with S/MIME-supporting software. Among the supported applications are Mozilla Thunderbird, MS Outlook, Evolution and GnuPG.

[H4] Supported email encryption standards: OpenPGP and S/MIME

Two different formats exist for email encryption: OpenPGP and S/MIME. OpenPGP is more popular for individual use, while S/MIME is predominantly used by businesses. Unlike most other USB dongles, Nitrokey supports both formats.

[H3] Encrypted mobile storage
Carry your important data with you, all data is hardware-encrypted on the Nitrokey Storage (8-64GB). Compatible with Windows, Linux and macOS.
read more
[H4] Data Loss on USB drives

To avoid damage to data, and even subsequent lawsuits, it is necessary to encrypt all sensitive data that you carry with you. You don't want find yourself dealing with the horrible potential consequences of data loss ([1], [2], [3]).

[H4] Insecure proprietary USB vendors

Hard disks and other equipment are routinely intercepted by the NSA en route from vendors to clients, and in the process are implanted with backdoors. With Nitrokey you can export the installed firmware and verify its integrity (or flash your own firmware).
In 2011 RSA Inc was hacked and the secret keys from all of their SecurID tokens were stolen, allowing to circumvent the access control.
FIPS 140-2 Level 2 certified USB storage devices from Kingston, SanDisk, Verbatim, MXI and PICO could easily be accessed using a default password (revealed in 2010).

Serious security flaws were also found in the following products:

Verbatim Keypad Secure (2022)
Lepin (2022)
Yubico's YubiKey (2019)
Safenet Protect Server PSI-E2/PSE2 (2019)
eyeDisk (2019)
Samsung, Crucial (2018)
Fujitsu, Zalman, Apricorn, Satechi, Startech (2016)
Western Digital (2015)
Xystec (2012)
Corsair's Padlock (2010)
Raidon‘s Staray-S-Serie (2009)
All USB storage devices from 9Pay, A-Data and Transcend which use fingerprint readers based on the USBest UT176 and UT169 from Afa Technology (2008)
Digittrade (2008)
Excelstor’s GStor Plus (2005)
Lexar JumpDrive (2004)

[H4] Encrypted Storage

The Nitrokey Storage contains an encrypted mass storage space with a capacity of up to 64 GB. To unlock the drive, simply enter your PIN and all of the encryption and decryption will be performed within the hardware device. This is theoretically more secure than a software solution and means that you no longer need to be dependent on an operating system. The device can be used with Windows, Linux and Mac OS X.

[H4] Hidden Volumes

Nitrokey Storage contains a feature which allows you to set up hidden volumes in addition to the primary encrypted storage. These hidden volumes are protected by an additional password and their existence cannot technically be proven. This allows you to deny the existence of any additional encrypted data, for example during border controls.

[H3] Hard Disk & File Encryption
Encrypt your hard disks and files while keeping your secret keys secure in your Nitrokey.
read more
If you have any private data stored on your computer or laptop, disk encryption is a must. With the Nitrokey you can use various disk encryption solutions. Your secret keys are stored securely on the Nitrokey device, which can be used similarly to a physical door key to unlock your computer. Among the supported solutions are LUKS, VeraCrypt, Gnu Privacy Assistant and GnuPG. Microsoft Bitlocker should also work but have yet to be tested.

[H3] Key and Certificate Management
Protect your server certificates by using up to 300 cryptographic keys with the Nitrokey HSM. Ideal for security servers, Public Key Infrastructures (PKI) and Certificate Authorities (CA).
read more
Servers are vulnerable to a large range of attacks, are online 24 hours a day, and are sometimes poorly maintained. Most servers will at some point contain a remotely exploitable security flaw (for example, OpenSSL's Heartbleed bug). Even though you may not be able to secure your server 100%, you can keep your private keys out of reach of attackers and store them on the Nitrokey.

[H3] Server Administration with SSH
Manage your servers, critical infrastructure, and Internet of Things (IoT) not just securely but also more easily. Administrators no longer require to synchronize key files between their desktops or remember complex passwords. Nitrokey acts as a mobile latch key to your servers by using Secure Shell (SSH), providing 2FA always at hand.

[H2] Nitrokey is better

[H3] High Security
Your secret keys are stored in the tamper-resistant and PIN-protected device and are secured against computer viruses, other malware, phishing, loss, theft and brute-force attacks.
read more
The Nitrokey (some models) contain smart cards that store and protect cryptographic keys securely (Common Criteria EAL 6+ certified). All sensitive cryptographic operations (e.g. generation of secret keys) are securely computed in the Nitrokey. The tamper-resistant design prevents sophisticated physical attacks with laboratory equipment.

An additional administrator PIN enables hierarchical use cases and the import of existing keys and backup of keys are possible.

[H3] Made in Germany
Nitrokey is developed and produced in Germany, primarily in Berlin. For the sake of higher quality and security, we do not use cheap overseas manufacturing.

[H3] Independent Security Assessment
The auditing company Cure53 performed an intensive security review of the Nitrokey Storage. The security experts summarize their results with "Nitrokey is capable of functioning properly and securely" (see final report available here Firmware, Hardware).
read more
A growing acceptance and user base supports continuous improvement and ensures high security due to peer reviews.

[H3] Open Source
Both hardware and software are open-source, free software and allow independent security reviews. Customisable, no vendor lock-in, no security via obfuscation, no hidden security issues!
read more
Secret keys can be generated securely by yourself rather than to trust a vendor doing so. The lack of vendor lock-in increases security of investment. Your Security does not depend on secrets stored centrally at the vendor (remember RSA's SecurID hack). We are committed to a transparent and open development process as an open source project.

[H3] Complete USB plug
Unlike some competitors, Nitrokey contains a complete and standard compliant USB plug. This ensures thousands of insertions without connectivity issues.

[H3] No Backdoors - No NSA
Installed firmware can be exported and verified, preventing attackers from inserting backdoors into products during shipping. Nitrokey is open-source and free of backdoors. Secret keys are generated only by you and we have no access to your private information.

[H3] Plausible Deniability
The only hardware solution with hidden encrypted storage. This allows you to plausibly deny the existence of encrypted data, for example during border controls.

[H3] Easy Integration
Nitrokey uses open interfaces and open drivers to enable its easy integration with your personal requirements. Custom solution can be provided on request.

[H3] Better Than Software
The Nitrokey hardware functions independently of any operating systems and protects your secret keys against theft, loss, user mistakes, phishing, brute-force attacks, computer viruses and other malware.

[H3] Sustainability
Regional production in Berlin, casings made from recycled plastic granulate, plastic-free shipping bags, green electricity, and refurbished laptops are examples we take for granted.
read more
All Nitrokeys contain as few toxic substances as possible (in accordance with RoHS directives), are designed for longevity (long service life and storage period in accordance with MTBF, MTTF) and contain no artificial predetermined breaking points. The compact design of our Nitrokeys minimizes the consumption of natural resources. As a result of a cooperation with the Technical University of Munich, we were able to analyze the worldwide supply chain of our electronics and improve our production processes.

For short distances and regional economic cycles, we produce as far as possible locally in Germany and increasingly enter into regional cooperations.

Goods are shipped in plastic-less envelopes without disproportionate product packaging. We try to avoid unnecessary paper consumption, for example by sending invoices by e-mail.

Our servers run with electricity produced from renewable energy sources.

We compensate all our car and flight travels via atmosfair.

With our bank account at GLS Gemeinschaftsbank eG, the largest ethical-ecological bank in Germany, we invest in renewable energy.

[IMG: Illustration: So funktioniert der Nitrokey]

[H2] How Nitrokey works
Protect emails, files, hard drives, server certificates and online accounts using cryptography. Your private keys are always stored securely in the Nitrokey hardware and can't be stolen. The device is PIN-protected and is secured against brute force and hardware attacks. Backups protect against loss.

[H2] The Nitrokey Family

Nitrokey 3
Nitrokey Storage 2
Nitrokey Pro 2
Nitrokey Start
Nitrokey HSM 2
Nitrokey Passkey

[IMG: Nitrokey 3]

[IMG: Nitrokey Storage]

[IMG: Nitrokey Pro]

[IMG: Nitrokey Start]

[IMG: Nitrokey HSM]

[IMG: Nitrokey Passkey]

Open source

Firmware updates

Tamper-resistant smart card

FIDO2, U2F, passkeys

One Time Passwords (OTP)

Password Manager

S/MIME email and hard disk encryption (X.509, PKCS#11)

OpenPGP/ GnuPG email encryption

NIST PIV (Personal Identity Verification)

Encrypted mass storage

Hidden volumes

PKI/CA management features

Touch Button

Number of key pairs
24 (PIV), 3* (OpenPGP)
3*
3*
3x3*
55

RSA key length [bit]
2048 - 4096
2048 - 4096
2048 - 4096
2048**
1024 - 4096

ECC key length [bit]
256 - 521
256 - 521
256 - 521
256
192 - 521

Elliptic curves
NIST P, Curve25519, Brainpool, Koblitz secp256k1
NIST P, Brainpool
NIST P, Brainpool
NIST P, Curve25519, Koblitz secp256k1
NIST P, Brainpool, Koblitz secp256k1

Interfaces
USB-A, USB-C, NFC
USB-A
USB-A
USB-A
USB-A
USB-A

Factsheet
Nitrokey 3
Nitrokey Storage 2
Nitrokey Pro 2
Nitrokey Start
Nitrokey HSM 2
Nitrokey Passkey

Price
Starting from € 54
€ 199
€ 109
€ 32
€ 109
€ 32

Buy
Buy
Buy
Buy
Buy
Buy

* Stores the key pair (RSA or ECC, if available) for one person/identity only. Technically these are 3 key pairs because GnuPG uses subkeys.
** 4096 bit are supported but each operation takes ca. 8 seconds.

[H2] Be The first to know
Stay informed about the Nitrokey project, new models and firmware updates.

[H2] Confirm e-mail address