GoKawiilOpen-source ToothPaste V2 lets BLE devices send encrypted keystrokes over USB-HID
Developer Brisk4t has released ToothPaste V2, an open-source hardware project built on an ESP32-S3 and a cryptographic IC that lets a phone or computer transmit AES-256 encrypted keyboard and mouse commands to any USB-compatible device via Bluetooth Low Energy. The system uses WEB-BLE and requires no drivers, server, or cloud service, and devices must complete a pairing flow before exchanging data. Firmware can be flashed via esptool or similar tools, and the project is available on GitHub.
GoKawiil's interpretation of the reporting above, not reported fact.
The project targets situations where typing a password manually is the only option, such as BIOS screens, air-gapped machines, or untrusted public computers, by letting users wirelessly 'paste' credentials as keystrokes instead. Because it relies entirely on local hardware with no cloud backend, it could appeal to privacy-conscious users and penetration testers, though its security ultimately depends on the robustness of its pairing and encryption implementation. As a passion project, the developer notes some features remain untested, suggesting it may not yet be ready for widespread security-critical use.
- ToothPaste V2 transmits AES-256 encrypted keyboard/mouse commands over BLE to USB-HID devices.
- It uses an ESP32-S3 and a cryptographic IC, with no server or cloud component involved.
- The tool aims to solve password entry on devices like BIOS screens or air-gapped systems that only accept keyboard input.
Source: brisk4t.github.io, 2026-11-03
Published there as: “ToothPaste”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.