Phishing bounces off
Fake sign-in pages can't reuse what the key signs. No codes to type, nothing to trick out of you.
Why a key beats a password
A tiny dongle that won't be fooled.
HID-HOP signs you in with FIDO2, the same standard behind hardware security keys and passkeys. Your login is cryptographically tied to the real website, so a look-alike page gets nothing it can use.
Lost it? Wipe it.
Erase the keys from your phone when the dongle is in range. Most security keys can't do that.
One press to approve
Every sign-in needs a physical press, so malware can't log in as you silently.
Honest comparison
Where HID-HOP wins, and where it doesn't.
Security depends on who you're defending against. Pick a threat to see how each option holds up.
| Threat | Password + app codes | Synced passkeysiCloud / Google | YubiKey | HIDHOP Lite | HIDHOP Hardeneddesign goal |
|---|---|---|---|---|---|
| PhishingFake login page steals your sign-in | Exposed | Protected | Protected | Protected | Protected |
| Leaked password databaseYour password shows up in a breach | Partly codes help | Protected | Protected | Protected | Protected |
| Cloud account hijackedSomeone takes over your Apple or Google account | Partly | Exposed keys sync | Protected | Protected | Protected |
| Malware on your computerIt can ride a session, not steal the key | Exposed | Partly | Partly | Partly | Partly |
| Key lostDropped it, nobody skilled has it | — | — | Partly remove from accounts | Protected remote wipe | Protected |
| Stolen by a skilled attackerMinutes with lab tools | — | — | Protected | Exposed | Protected secure element |
| Left unattendedSomeone reflashes it while you're away | — | — | Protected | Exposed | Protected signed firmware |
| Key copied or cloned | — | Exposed by design | Protected | Partly if generated on-key | Protected |
| You can inspect the firmwareOpen source, build it yourself | — | No | No | Yes | Yes |
| Separate identities on one keyWork, personal, throwaway | Partly | Partly | Partly | 8 slots | 8 slots |
| Independently certifiedFIDO Alliance certification or third-party audit | — | Yes | Yes | Not yet | Planned |
HIDHOP Hardened ratings are design goals for the funded product, not tested results. YubiKey is a trademark of Yubico AB; HID-HOP is not affiliated with Yubico.
No hype
What Lite is, and what it isn't.
We'd rather you buy the right key than the wrong one.
- Real protection against phishing and password leaks, the attacks that hit most people
- Keys generated on the dongle and never sent to your phone
- Remote wipe, open firmware and 8 separate identities
- Not a secure element: someone who gets the dongle in their hands with lab tools could extract keys
- Not yet certified or independently audited
- Always register a second key as a backup
Coming to Kickstarter
Start with Lite today. Upgrade to Hardened.
Back the Hardened HID-HOP and we'll ship you a Lite right away, so you're protected while yours comes off the production line.
HIDHOP Lite
$29.99
- Phishing-resistant FIDO2 security key over USB
- Keyboard, mouse and media control over BLE mesh
- Remote wipe from the iPhone app
- Open firmware you can build and flash yourself
HIDHOP Hardened
$129.99 + a free Lite now
- Everything in Lite
- Keys held in a dedicated secure element
- Signed firmware and locked debug port
- Independent security review before shipping
Goal: 1,000 Hardened backersCampaign not yet live
1,000 pre-orders covers a production run with a secure element on every unit. Pricing and features are planned, not final.
Wrap one up
The gift that keeps on not getting hacked.
Know someone who reuses the same password everywhere? A HID-HOP in their stocking is the easiest upgrade they'll ever make. Plug it in, press the button, and phishing pages stop working on them.