Skip to main content

OneSpan FIDO2

Identity Passwordless Access

Overview​

OneSpan's Digipass FX-series FIDO2 tokens (FX1 Bio and FX7) are hardware security keys designed for phishing-resistant, passwordless authentication using the FIDO2/WebAuthn standard

How to position​

  • Enterprises and SMEs needing phishing-resistant MFA for workforce logins (Windows 10/11 logon, Microsoft Entra ID, cloud IAM platforms)
  • Financiel services, healthcare and regulated industries where compliance demands strong authentication, and where OneSpan's heritage resonates
  • Organizations transitioning from password + SMS OTP or push MFA to passwordless, needing a hardware-based bridge for legacy and modern apps
tip
  1. Phishing resistant: FIDO2 authentication is the only phishing resistant way to login to any application. If you don't use passwords, you can't expose them
  2. Password fatigue: Employees hate passwords. You need to remember them, change them every X time and because of this, employees create less secure passwords. You can enforce them to use a more complex password, but then they will write it down...
  3. MFA is not always secure: MFA can be bypassed... We created a nice video about this: https://www.youtube.com/watch?v=IiOVS4eRsFU
  4. It's not difficult to enroll: Connecting a FIDO2 token to your Microsoft account is easy. Also for this, we created a video: https://www.youtube.com/watch?v=2Tqk6j8rAvU

Onespan FX)series tokens fit as hardware-based, phishing-resistant MFA/passwordless add-ons for customers using any FIDO2-enabled IAM platform, with a strong story for regulated industries.
Focus on Microsoft-centric environments, and organizations looking to eliminate password-related risk and helpdesk cost.

Core Features​

  • FIDO2 public-key cryptography: Both tokens use FIDO2 standards where private keys and biometric data (on FX1 Bio) never leave the device; authentication is verified via a public-key challenge-response flow, eliminating password transmission and server-side credential storage
  • Digipass FX7: is the premium option featuring fingerprint biometric authentication plus USB-C, NFC and Bluetooth connectivity, allowing use across laptops, desktops and mobile devices without a mandatory USB port
  • Digipass FX7: is a compact, USB-C-only security key with one-touch (button tap + optional PIN) authentication, targeting simpler deployment scenarios where biometric and wireless connectivity are not required
  • Both tokens are "zero-footpring" (no drivers or client software required) and wourk out-of-the-box with any FIDO2-enabled service

Feature Overview​

AspectDigipass FX1 BioDigipass FX7
Authentication methodFingerprint biometric + optional PINOne-touch button tap + Optional PIN
ConnectivityUSB-C (integrated cable), NFC, Bluetooth 5.2 LEUSB-C only
Form factor35x35x10.8mm, 11g, rechargeable battery36.1x17.2x7mm, 3g, no battery required
FIDO supportFIDO U2F, FIDO2, passkeysFIDO U2F, FIDO2.1, CTAP2.1
Use case fitMobile + desktop, flexible multi-device authentication, higher assurance with biometricDesktop/laptop focus, ultra-compact, simplest deployment
Target usersWorkforce and privileged users needing wireless/mobile flexibility and biometric assuranceWorkforce users needing cost-effective, plug-and-play passwordless on USB-C devices