Overview

Kleidos on the M5Stack CoreInk

Kleidos turns the M5Stack CoreInk into a password manager: it keeps your passwords encrypted on the board and types them into your computer over Bluetooth, after you unlock it on the board itself. The firmware costs nothing and asks for no account. There is nothing to install yet: version 0.1.0 is not released.

The same firmware runs on nine boards, and I recommend none of them over the others: this page is what the CoreInk does with it.

Updated

Kleidos on its own screen

Every recording here is of the CoreInk's own screen, with a demonstration vault on a development build. The same recordings are on the recordings page, beside those of the other boards I have filmed.

One-bit electronic paper The same demonstration vault drawn in one bit on electronic paper: the list with its dithered service marks, the wheel stepping down to an entry, the card's pager walking its sections, and the password unmasked under a held key.
A one-time code The vault steps from its passwords to its 2FA page, and two demonstration codes are drawn in one bit, each with the ring that shows how long it has left. They are real codes, computed on the device for the moment the clip was recorded.
The code that opens the panel The CoreInk's own screen while it serves the admin panel: the vault, then the admin card with the join code drawn on electronic paper and the name to open in a browser, then the vault again with the radio down. Nothing moves in between: the card is a screen the device holds for as long as it serves. I served the panel over a debug link for this recording, so the network behind the code is a placeholder.

Each picture's badge says how I made it, and the legend of the badges explains every kind.

  • Live from the device

What each control does

Each row quotes what the CoreInk itself shows for that control: on the pages it shows the first time it starts, or in the bar at the foot of its vault list.

The controls of the CoreInk
Control What the board says it does
The wheel, turned “move, adjust”
The wheel, pressed “select, continue”
The wheel, held “hold: type, dial PIN”
The side key “side key: back, wake”
The top key “top key: lock”

A hold is a press longer than 600 ms.

I will write a guide to every screen, board by board, once the interface stops changing.

What it holds, and how it keeps time

The vault is the same on every board. What changes with the board is how much it holds, how it keeps time for the one-time codes and where its backups go.

Chip
ESP32
Input
Wheel
Screen
200×200
Case
40×56 mm
Capacity
90 credentials, 30 two-factor codes
Clock
Battery-backed chip
Card slot
No: backups go through the panel

What it draws from its battery

What the CoreInk draws in each state, as the measurements page prints it, with what each state is and how each figure was taken.

What it costs

Kleidos costs nothing: there is nothing to buy from the project and no account to make, and the firmware is free software under GPL-3.0-or-later. What you pay for is the board.

Price
US$29.90
Listed by
M5Stack's own store
Product code
K048
Read on
1 November 2026

That is what the maker's own store asked on the day I read it, before shipping and taxes. Resellers ask their own, and the price moves.

Where the firmware stands

Kleidos is pre-release, at version 0.1.0: there is nothing to install yet, and the roadmap says what is left before the first release.

Version
0.1.0
To install
Nothing yet: no release is published
Hardened build
Not available (4 MB flash)

I have not had the firmware or the cryptography reviewed by anybody outside the project; the security page says what you can and cannot check.