# Using onlykey without PIN

**URL:** <https://onlykey.discourse.group/t/using-onlykey-without-pin/1159>\
**Category:** Feature Requests\
**Created:** [September 28, 2023, 3:47pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159 "2023-09-28T15:47:33Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![lvpha](https://avatars.discourse-cdn.com/v4/letter/l/a698b9/32.png) [@lvpha](https://onlykey.discourse.group/u/lvpha)\
**Post date:** [September 28, 2023, 3:47pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/1 "2023-09-28T15:47:33Z")

</div>

Greetings,

I saw that this has been requested before by somebody. But, I wanted to emphasis that using the key without a PIN is very convenient, and serves the purpose of OnlyKey which is **convenience**.

When we talk security, OnlyKey barely adds any benefits against today’s threats. But, it’s super convenient to use, and manage passwords.

Using OnlyKey without a PIN is actually secure for many. The threat are those APT hackers that are after corporate data, not the waitress.

I hope there will be a new firmware allowing the key to be used without a PIN.

---

<div class="post-metadata">

**Author:** ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)\
**Post date:** [September 28, 2023, 6:57pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/2 "2023-09-28T18:57:42Z")

</div>

You can use OnlyKey DUO without a PIN.

For other comments here I think many would disagree with these statements. A device that can fully log into your most important accounts without any physical security would not be a feature we would support. Losing a device without a PIN could be disastrous for a user and for the corporate data that user has access to.

---

<div class="post-metadata">

**Author:** ![lvpha](https://avatars.discourse-cdn.com/v4/letter/l/a698b9/32.png) [@lvpha](https://onlykey.discourse.group/u/lvpha)\
**Post date:** [September 28, 2023, 7:02pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/3 "2023-09-28T19:02:14Z")

</div>

That’s true IF you have the URLs, and usernames there 😃 But, if possible, we would love to have the option.

---

<div class="post-metadata">

**Author:** ![Mango\_Mungo](https://yyz2.discourse-cdn.com/free1/user_avatar/onlykey.discourse.group/mango_mungo/32/26_2.png) [@Mango\_Mungo](https://onlykey.discourse.group/u/Mango_Mungo)\
**Post date:** [October 10, 2023, 8:18pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/4 "2023-10-10T20:18:23Z")

</div>

This would also eliminate the OnlyKey self-destruction after 10 incorrect PINs.

We, the Tor community, recommend OnlyKey for people traveling to oppressive regimes. Many activists and [reporters](https://rsf.org/en) rely on it. They can face torture and prison if they enter countries such as Turkmenistan, Miamar, Russia, China, Iran, etc.  
I’m a big Tor exit operator. The cops can come in on me again any day. I want the SSH keys to my servers on the OnlyKey to be bulletproof.

If you don’t need a PIN, the small OnlyKey DUO is much more convenient. You can leave it permanently stuck in your laptop.

---

<div class="post-metadata">

**Author:** ![lvpha](https://avatars.discourse-cdn.com/v4/letter/l/a698b9/32.png) [@lvpha](https://onlykey.discourse.group/u/lvpha)\
**Post date:** [October 12, 2023, 2:25am UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/5 "2023-10-12T02:25:52Z")

</div>

Hey @Mango_Mungo ,

The list of countries you provided is very misleading, and could cause people to look away from the real danger.

The only place where people get detained 6 months or more for not unlocking their devices is the US, and the UK (could be some EU countries as well).

That’s where OnlyKey second profile come into play. Because entering a wrong pin to wipe out the OnlyKey would count as ‘Tampering with evidence’ in the US. That is few years in jail trying to protect your wife’s nudes. in the UK, that is obstructing justice, even worse. Here I listed some articles for you information.

> **[Man Jailed 6 Months for Refusing to Give Police his iPhone Passcode](https://thehackernews.com/2017/06/unlock-iphone-passcode.html)**
>
> You Can Go to Jail for Refusing to Give Police Your iPhone Passcode

> **[Former Officer Is Jailed Months Without Charges, Over Encrypted Drives...](https://www.nytimes.com/2016/05/06/technology/former-officer-is-jailed-months-without-charges-over-encrypted-drives.html)**
>
> The authorities want him to unlock the drives, which they believe contain child pornography.

> **[Campaigner who refused to hand over passwords found guilty](https://news.sophos.com/en-us/2017/09/27/campaigner-who-refused-to-decrypt-smartphone-and-laptop-found-guilty/)**
>
> Muhammad Rabbani was found guilty of obstructing justice after refusing to unlock his laptop and smartphone

---

<div class="post-metadata">

**Author:** ![Mango\_Mungo](https://yyz2.discourse-cdn.com/free1/user_avatar/onlykey.discourse.group/mango_mungo/32/26_2.png) [@Mango\_Mungo](https://onlykey.discourse.group/u/Mango_Mungo)\
**Post date:** [October 12, 2023, 9:10pm UTC](https://onlykey.discourse.group/t/using-onlykey-without-pin/1159/6 "2023-10-12T21:10:37Z")

</div>

I don’t want to discuss which country it is worse to be arrested in. In some you disappear forever and not just 6 months, or pay a ridiculous fine.

Your examples confirm how important the PIN’s & OnlyKey self-destruction is at almost every border. Important data on the server in the data center, SSH keys on the Onlykey.
