Kept on the device
Every credential you save stays on your Obelist. Nothing is synced to a server or left on your computer.
Features
Save and autofill your passwords on every site, and create strong new ones in a click.
Security
Every credential you save stays on your Obelist. Nothing is synced to a server or left on your computer.
Everything you save is guarded by a CC EAL6+ certified chip, built to resist advanced hardware and software attacks.
Obelist opens only with your PIN. After too many wrong guesses, it locks itself for good.
Keep one or several. Only cards bought by you can pair with your Obelist O1. Others are refused.
Compatibility
Desktop
Mobile
Browser
Import
Imports are subject to the export options of your current password manager. Exports may be unavailable on business or managed accounts, and not all credential types may be supported.
Backup
Slide the card into your Obelist O1 and it saves an encrypted copy of everything. For passkeys, the card acts as its own security key.
Keep the card somewhere safe, away from your Obelist O1. Add as many cards as you like, and store each one in a different place.
Set a reminder in the app and you'll get a nudge to dock the card after adding new credentials, so your backup always stays up to date.
Lost your Obelist O1? Get a new one, dock your backup card, and every password and code is restored exactly as you left it.
Batch 1: Shipping Q2 2027
Includes your first backup card
Add extra backup cards+$00 each
0$000$000
Tech specs
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| WebAuthn (Level 2) | Yes | Yes |
| FIDO2 CTAP 2.1 | Yes | Yes |
| FIDO U2F (CTAP1) | Yes | Yes |
| CTAP2 extensions | hmac-secret, credProtect, credBlob, largeBlob | hmac-secret, credProtect |
| Credential management (CTAP 2.1) | Yes | Yes |
| Smart card: PIV (NIST SP 800-73-4) | Yes | Upcoming |
| OpenPGP Card 3.4 | Upcoming | Upcoming |
| SSH (FIDO2 ed25519-sk / ecdsa-sk) | Yes | Yes |
| SSH (PIV / PKCS#11) | Yes | Upcoming |
| OATH-TOTP (RFC 6238) | Yes | Yes |
| OATH-HOTP (RFC 4226) | Yes | Yes |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| True random number generator (TRNG) | Yes | Yes |
| Signed firmware updates | Yes | Yes |
| Debug port locked (APPROTECT) | Yes | Yes |
| Non-exportable private keys | Yes | Yes |
| Storage encryption | AES-256 | AES-256 |
| PIN retry limit | 3, then crypto-erase | 3, then crypto-erase |
| User verification (UV) | PIN on the device's own screen | PIN from the computer, or from the O1 when docked |
| User presence (UP) | Touchscreen | Physical button |
| Attestation | Basic, Obelist CA and AAGUID | Basic, Obelist CA and AAGUID |
| Real-time clock | Crystal-backed, TOTP without a computer | – |
| Firmware language | Rust | Rust |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| RSA | 2048 / 3072 / 4096 | Upcoming |
| ECC NIST | P-256 / P-384 / P-521 | Upcoming |
| Ed25519 | Yes | Yes |
| X25519 | Yes | Upcoming |
| Symmetric | AES-128 / AES-256 | AES-128 / AES-256 |
| HMAC | SHA-1 / SHA-256 / SHA-512 | SHA-1 / SHA-256 / SHA-512 |
| Hashes | SHA-256 / SHA-384 / SHA-512 | SHA-256 / SHA-384 / SHA-512 |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| Passwords | Yes | Yes |
| Passkeys (FIDO2) | Yes | Acts as a separate deviceThese keys are made inside the O1’s secure chip and can never leave it, so they aren’t copied. The card makes its own instead: add it to your accounts as a second key. |
| Authenticator codes (TOTP / HOTP) | Yes | Yes |
| Smart card keys (PIV) | Yes | Acts as a separate deviceThese keys are made inside the O1’s secure chip and can never leave it, so they aren’t copied. The card makes its own instead: add it to your accounts as a second key. |
| OpenPGP keys | Upcoming | Acts as a separate deviceThese keys are made inside the O1’s secure chip and can never leave it, so they aren’t copied. The card makes its own instead: add it to your accounts as a second key. |
| SSH keys (FIDO2 / PIV) | Yes | Acts as a separate deviceThese keys are made inside the O1’s secure chip and can never leave it, so they aren’t copied. The card makes its own instead: add it to your accounts as a second key. |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| USB | USB-C receptacle, USB 2.0, 12 Mbps | USB-C plug, USB 2.0, 12 Mbps |
| Bluetooth | Bluetooth Low Energy (HID over GATT) | – |
| NFC | Upcoming ISO/IEC 14443-A | – |
| Dock | Receptacle for the Backup Card | Docks into the O1 |
| USB device classes | FIDO HID, CCID, HID keyboard | FIDO HID, CCID (upcoming) |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| Operating systems | macOS, Windows, Linux, iOS, Android | macOS, Windows, Linux, iOS, Android |
| Browsers | Chrome, Safari, Firefox, Edge | Chrome, Safari, Firefox, Edge |
| Smart card middleware | Windows PIV minidriver, macOS CryptoTokenKit, OpenSC (PKCS#11) | Upcoming |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| Passwordless | Yes | Yes |
| Strong two-factor | Yes | Yes |
| Strong multi-factor | Yes | Yes |
| Phishing-resistant | Yes | Yes |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| FIDO2 L1 | Planned | Planned |
| Secure element | CC EAL 6+ | CC EAL 6+ |
| FCC | Planned | Planned |
| CE | Planned | Planned |
| UKCA | Planned | Planned |
| RoHS | Planned | Planned |
| Specification | Obelist O1 | Backup Card |
|---|---|---|
| Display | 2.8" | – |
| Battery | To be determined | None, powered over USB |
| Enclosure | 6061 aluminium, bead-blasted, anodised / ABS back | 6061 aluminium, bead-blasted, anodised / ABS back |
| Dimensions | 53.4 × 80.1 × 10.6 mm | 29.5 × 39.4 × 4.5 mm |
In the box
Holds every credential you save
A second copy, kept somewhere safe
Fills the card bay while the card is away
For charging and firmware updates
Compare
Today
Comparisons describe typical password managers, authenticator apps and security keys, not any one product. Features may vary by provider and plan.
With Obelist O1
Got more questions? Write to us
A small device that keeps your passwords, passkeys and authenticator codes, and signs you in on your computer and phone. It is a password manager and a security key in one.
Your credentials are never stored on a phone, a computer or a server. They stay on your Obelist O1, guarded by its secure chip and your PIN.
Plug in your Obelist O1 and open the login page. It fills in your password for you. For passkeys, you approve the sign-in on its screen.
You enter your PIN on it, approve passkeys and read your authenticator codes, without relying on your computer or phone.
Yes. Obelist O1 never needs the internet. Everything you save stays on your device and your backup card.
We will share battery life once it has been tested on the final hardware. It charges over USB-C.
Only on your Obelist O1 and your backup card, encrypted with keys held in the secure chip. Nothing is stored in a cloud.
No. We never receive your credentials, so there is nothing for us to see.
It is useless without your PIN. After 3 wrong guesses it erases itself, and your backup card restores your passwords and codes to a new one.
Your backup card holds an encrypted copy of your passwords and codes. Dock it in a new Obelist O1 and they are restored exactly as you left them.
After 3 wrong tries, your Obelist O1 erases itself. Set it up again with a new PIN and restore your passwords and codes from your backup card.
Its secure chip is certified to Common Criteria EAL 6+. FIDO2 certification for Obelist O1 is planned.
The first batch is planned to ship in Q2 2027. If that changes, we will email you.
Yes. You get a full refund any time before production starts.
No. Every feature comes with your Obelist O1, with nothing more to pay.
Shipping details will be shared before preorders open.
Shipping costs and taxes will be shared before preorders open.
Warranty and return details will be shared before preorders open.
First batch ships Q2 2027
Preorder now and be one of the first to get Obelist. Fully refundable until production starts.
Outside the U.S. and Canada? Tell us where you are so we know where to ship next.
