Overview
Kleidos on the LilyGO T-Deck Plus
Kleidos turns the LilyGO T-Deck Plus into a password manager: it keeps your passwords encrypted on the board and types them into your computer over Bluetooth, after you unlock it on the board itself. The firmware costs nothing and asks for no account. There is nothing to install yet: version 0.1.0 is not released.
The same firmware runs on nine boards, and I recommend none of them over the others: this page is what the T-Deck does with it.
Updated
Kleidos on its own screen
Every recording here is of the T-Deck's own screen, with a demonstration vault on a development build. The same recordings are on the recordings page, beside those of the other boards I have filmed.
Each picture's badge says how I made it, and the legend of the badges explains every kind.
- Live from the device
What each control does
Each row quotes what the T-Deck itself shows for that control: on the pages it shows the first time it starts, or in the bar at the foot of its vault list.
| Control | What the board says it does |
|---|---|
| Enter | “selects and opens” |
| Backspace | “goes back or deletes” |
| The trackball | “roll to move, press to open” |
| The letter keys | “type a name to find it” |
| A tap | “select” |
| A swipe up or down | “scroll” |
| A swipe sideways | “change tab” |
- Enter
- What the board says it does: “selects and opens”
- Backspace
- What the board says it does: “goes back or deletes”
- The trackball
- What the board says it does: “roll to move, press to open”
- The letter keys
- What the board says it does: “type a name to find it”
- A tap
- What the board says it does: “select”
- A swipe up or down
- What the board says it does: “scroll”
- A swipe sideways
- What the board says it does: “change tab”
I will write a guide to every screen, board by board, once the interface stops changing.
What it holds, and how it keeps time
The vault is the same on every board. What changes with the board is how much it holds, how it keeps time for the one-time codes and where its backups go.
- Chip
- ESP32-S3
- Input
- Keyboard
- Screen
- 320×240
- Case
- 73×115 mm
- Capacity
- 500 credentials, 50 two-factor codes
- Clock
- Internal, unset after every sleep
- Card slot
- Yes: it writes its own backups
What it draws from its battery
What the T-Deck draws in each state, as the measurements page prints it, with what each state is and how each figure was taken.
-
LilyGO T-Deck Plus
A charge lasts about 11 to 21 days, my estimate. An unlock takes 2.9 s with 30 credentials and 10 two-factor codes, and 3.5 s with a full vault, as I timed it on the board's own clock.
- Asleep
- 3.93 mA
- measurement system
- Light sleep
- 27.0 mA
- measurement system
- Normal use
- 85.4 mA
- measurement system
- Wi-Fi
- 157.4 mA
- measurement system
- Bluetooth
- 121.1 mA
- measurement system
Deep-sleeps with the chip still powered, and only its reset button or its power switch wakes it: the reset leaves its clock unset.
What it costs
Kleidos costs nothing: there is nothing to buy from the project and no account to make, and the firmware is free software under GPL-3.0-or-later. What you pay for is the board.
- Price
- US$70.99
- Listed by
- LilyGO's own store
- Product code
- H737-A
- Read on
- 1 November 2026
That is what the maker's own store asked on the day I read it, before shipping and taxes. Resellers ask their own, and the price moves.
The listing offers several variants at different prices; this is the cheapest that was in stock that day.
Where the firmware stands
Kleidos is pre-release, at version 0.1.0: there is nothing to install yet, and the roadmap says what is left before the first release.
- Version
- 0.1.0
- To install
- Nothing yet: no release is published
- Hardened build
- In development
I have not had the firmware or the cryptography reviewed by anybody outside the project; the security page says what you can and cannot check.