Home » Products » FIDO2 range » Winkeo2-A FIDO2
Security key FIDO2

Winkeo2-A FIDO2

The Winkeo2-A FIDO2 is NEOWAVE’s new generation of USB Type-A security keys designed to provide strong authentication, both on the web and in the cloud. Compatible with the FIDO2 (CTAP 2.0) and FIDO U2F standards, it ensures maximum protection against phishing and password theft, while remaining simple and quick to use.

The Winkeo2-A FIDO2 features a more modern and streamlined design, perfectly aligned with the brand’s other products. Its new, more intuitive rear button offers improved ergonomics and a smoother everyday user experience. By protecting your access against phishing attacks or password theft, the Winkeo2-A FIDO2 key combines security, modernity, and ease of use

.

NEOWAVE awarded Cybersecurity Made in Europe
The ANSSI Security visa by the French National Cybersecurity Agency

USB-A security key compatible with FIDO2 (CTAP 2.0)

Credential generation, management and storage inside the smart card

Ease of use

(no software installation on the client workstation)

Anti-Phishing protection

(in order to replace vulnerable SMS, OTP or TOTP solutions)

The Winkeo2-A FIDO2 USB-A security key complies with the FIDO Alliance’s FIDO2 and FIDO U2F specifications. The FIDO protocol is based on asymmetric cryptography architectures. It consists of using a private/public key pair. The private key never leaves the Winkeo2-A FIDO2 device.

The FIDO2 standard enables secure, passwordless authentication. Simply insert the Winkeo-A FIDO2 key into your computer’s USB port, enter your PIN, and press the button to authenticate. The Winkeo-A FIDO2 key thus easily replaces your password. It is compatible with Windows 10 / 11 and Microsoft Entra ID. It is also compatible with the FIDO U2F standard, which allows two-factor authentication for your online accounts: social networks, webmail, e-commerce sites, online banks, etc.

In addition, the key incorporates a Common Criteria EAL5+ certified smart card component. The implementation of the FIDO standard combined with the integration of a secure smart card component ensures a very high level of security.

The Winkeo-A FIDO2 security key has also been tested and recognized as reliable by ANSSI (the French Cybersecurity Agency) and received the Security Visa in 2022 (Certificate ANSSI-CSPN-2022/06). Moreover, NEOWAVE is a Microsoft partner for its “passwordless” (FIDO2) authentication solutions.

Features

Interface

USB-A HID

Certifications

  • Smart card (QFN format) certified Common Criteria EAL5+
  • “Cybersecurity Made in Europe” label

Wide compatibility

• Windows 10/11 with Microsoft Entra ID and over 250 online services such as Gmail, PayPal, OVH, WordPress, and Dropbox
• Identity federations such as Evidian, Ilex, Okta, and Ping Identity

Supported operating systems and browsers

Operating Systems: Windows, Mac OS, Linux
Browsers: Chrome, Edge, Firefox, Safari

FIDO2 features

• credProtect
• hmac-secret
• Resident keys (rk) – Detectable credential
– Maximum number limited by an available persistent memory (200 to 512 bytes per credential)
• User PIN, PIN 1 and PIN 2 protocols
– PIN length between 4 Unicode characters and 63 bytes
– PIN try limit set to 8. After 8 unsuccessful tries, the authenticator must be reset.
– No default value
– Management of specific PIN policies
• Customization options:
– credBlob
– largeBlobKey
– noMcGaPermissionsWithClientPin
– largeBlobs
– minPinLength
– pinUvAuthToken
– ep – Enterprise Attestation
– authnrCfg
– credMgmt
– setMinPINLength
– makeCredUvNotRqd
– alwaysUv

Supported signature-algorithm

ECC P-256 (secp256r1)

Associated optional services

Graphical customization: logo, photo, name, unique number …

Size / Weight

Length 43.8 mm / Width 18 mm / Thickness 9.76 mm / Weight 5 g

I would like more information on the NEOWAVE offer