Buy options
€13.00| Model Number | T2F2-NFC-Card PIN+ Release3 |
|---|---|
| Form-factor | Credit card format NFC + SmartCard Contact |
| Functions | PIN+ & FIDO2.1 WebAuthN+CTAP OpenPGP |
| Dimensions | 85×53×1 mm |
| Weight | 2 gr |
| Programmable | |
| Storage | passkeys: 300 |
| Product ID | T2-105 |
| Azure Passwordless | fully compatible | |
|---|---|---|
| Google Account | fully compatible | |
| Stripe Account | fully compatible | |
| Facebook Account | fully compatible | |
| GitHub Account | fully compatible | |
| 🇨🇭 AGOV- Authentication of Swiss Authorities | fully compatible | |
Not listed here |
Write us |
|
If the system you are using is not included in the compatibility list, it does not necessarily indicate incompatibility. We encourage you to refer to our integration guides page or get in touch with us for more information. | ||
For detailed information on how FIDO2 authentication is supported across different operating systems and browsers, including specific considerations and limitations, please visit our comprehensive guide
Please check product and platform compatibility before placing an order
All pictures shown are for illustration purpose only. Actual product may slightly vary due to product enhancement or other reasons.
PIN+ Firmware
This security key runs our PIN+ firmware and is the most secure FIDO2 security key on the market. It is open-source and has undergone a public third-party security audit.The T2F2-NFC-Card PIN+ Release3 from Token2 is a NFC smart card that fully supports the FIDO2.1 and FIDO U2F standards, featuring PIN complexity at the firmware level. This smart card offers a simplified and robust authentication solution for cloud and web applications. With its versatility, professionals can effortlessly implement secure authentication measures on both mobile and desktop platforms. With Release3 of our PIN+ Cards, you can now store up to 300 passkeys (also known as resident keys or discoverable credentials) on a single device.
What's New in Release3
- OpenPGP Applet: Release3 introduces an OpenPGP applet, adding compatibility with OpenPGP software for secure digital signing, encryption, and authentication.
Specifications
| Model Number | Token2 T2F2-NFC-Card PIN+ Release3 |
| Button | None ( replaced by tapping on an NFC reader) |
| Functions | FIDO U2F + FIDO2.1 WebAuthn |
| OpenPGP | RSA: RSA1024 and RSA2048 ECC: ECC256r1, ECC256k1, ECC384r1, and ECC521r1 User Interaction Flags (UIF): not supported Curve25519: not supported |
| Embedded security algorithm | ECDSA , SHA256, AES, HMAC, ECDH |
| Interface type | NFC (Contactless) , Smart Card Contact interface |
| Firmware | FIDO 2.1 Token2 PIN complexity enforcement |
| Maximum FIDO2.1 Resident keys | 300 |
| Lifetime | At least 10 years |
| Programming cycles | 100,000 times |
| Communication protocol | CTAP2 via NFC or Smart Card contact |
| Working temperature | -10℃ - 50℃ |
| Dimensions | 85.6 mm x 53.98 mm x 1 mm |
| Storage temperature | -20℃ - 70℃ |
Operating Systems and Browsers Support
For detailed information on how FIDO2 authentication is supported across different operating systems and browsers, including specific considerations and limitations, please visit our comprehensive guide
Blog
21-11-2024
New iOS 18.1 Update Breaks Support for FIDO2.1 Final Keys
The latest iOS 18.1 release has introduced an unexpected issue affecting FIDO2.1 Final keys, rendering them incompatible with the new update. This issue is not limited to Token2's security keys but impacts devices from all manufacturers adhering to the FIDO2.1 final specification.
10-09-2024
Independent Public Security Review of Token2 PIN+ FIDO2 Security Keys
Compass Security Schweiz AG (Compass), a leading Swiss IT security firm, has conducted a comprehensive and independent public security review of the Token2 PIN+ FIDO2 Security Keys firmware.
04-09-2024
Update on EUCLEAK Vulnerability and Chip Security
We want to assure you that we do not use Infineon chips, which are affected by the EUCLEAK side-channel attack recently identified by NinjaLabs. This attack exploits a vulnerability related to the extended Euclidean algorithm (EEA) used in modular inversion.