Flash KeyForge Firmware

Install KeyForge secure firmware on your Seeed XIAO ESP32-S3 directly from your browser.

Permanent Device Modification

This firmware enables Secure Boot and burns eFuses.

  • Your ESP32-S3 will be permanently locked to KeyForge firmware
  • The device cannot be repurposed for other projects
  • This action is irreversible - eFuse burns cannot be undone
  • Future updates must be signed with AuthGrid's key

If you want to experiment or develop, use the non-secure development build instead.

Requirements

  • Browser: Chrome, Edge, or Opera (Web Serial API required)
  • Hardware: Seeed XIAO ESP32-S3
  • Cable: USB-C data cable (not charge-only)

Instructions

  1. Hold the BOOT button on your XIAO ESP32-S3
  2. While holding BOOT, plug in the USB-C cable
  3. Release BOOT after 1 second (device is now in download mode)
  4. Click the install button below
  5. Select the serial port when prompted
  6. Wait for flashing to complete (~30 seconds)
Firmware version: loading...
Your browser doesn't support Web Serial.
Please use Chrome, Edge, or Opera.
Serial access was denied.
Please reload and try again.

After Flashing

  1. Unplug and replug the device (normal mode)
  2. The yellow LED will blink when ready
  3. Visit webauthn.io to set up your PIN and test
  4. Important: Back up your master seed before registering accounts

Alternative Installation Methods

Prefer command-line tools? See the Getting Started guide for manual installation with PlatformIO or the keyforge-flash tool.