DIGIPASS CX Features

Bring the highest level of assurance to your transactions with a secure and simplified user experience

Digipass CX1 & CX2

DIGIPASS CX2

Unrivaled user experience

Passwordless solution

Eliminating passwords improves usability. Remove friction and deploy stronger and more convenient authentication with fingerprint biometrics.

Intuitive to use

DIGIPASS CX 2 is intuitive to use. Menus are easily accessed from the device touch screen. To authenticate, users simply scan their fingerprint. All information about the service they’re logging on to, or the transaction or document they want to sign, is presented on the large color display.

Do business, anywhere, anytime

Log on, and sign transactions and documents anywhere, anytime, on any device, in all confidence.

Different connection options

While DIGIPASS CX2 can be connected to the desktop via USB, they are also Bluetooth/NFC-enabled. This means they work seamlessly with any user laptop, desktop computer, tablet, or phone, to ensure maximal user adoption.

What you see is what you sign

Users are presented with contextual information about the service they want to log on to or the transactions they sign. All transaction details are encrypted and presented for verification by the user before signing.

Enhanced security

Mitigate social engineering fraud

DIGIPASS CX2 enables passwordless authentication. The device works in connected mode, so one-time passwords are never disclosed. Instead, they are encrypted and transferred in the back end. This reduces the likelihood of exposure to schemes such as adversary-in-the-middle and adversary-in-the-browser attacks, account takeover, and replay attacks that rely on passwords.

Secure transaction signing

Ensure message authenticity and integrity of online transactions with DIGIPASS CX2. Elevate trust in your online and mobile channels, strengthen the relationship with your user base, and meet regulatory requirements.

Secure communication channel

DIGIPASS CX2 connects to the DIGIPASS Cloud Console. The DIGIPASS Cloud Console is essential to establish a secure connection with DIGIPASS CX devices. The console manages the secure communication channel to the device without needing to rely on the security of the underlying transport layers (Bluetooth or WiFi), which ensures message authenticity, confidentiality, and replay resistance. 

Flexible, future proof and versatile

Secure remote updates

Secure remote updates can be installed on DIGIPASS CX2 even after the devices have been deployed and distributed. This gives you the flexibility to activate new features, customize your users’ journey, or modify configuration and security parameters to adapt quickly to evolving technology, changing business needs, and ever-more sophisticated threats.

One device for different business needs

DIGIPASS CX2 is designed to meet different business needs, from authentication and transaction authorization, to document signing and credential storage.

Multi-protocol device

DIGIPASS CX2 supports multiple authentication methods – including FIDO2 and OATH – enabling organizations to secure their applications and services using the appropriate protocol for each environment.

Easy to integrate and manage

End-to-end lifecycle management

Effortlessly manage the end-to-end lifecycle with the administrator console provided by the DIGIPASS Cloud Console. Easily create, configure, update, delete, and reassign devices to your users.

Customize authentication and transaction flows

Using the DIGIPASS Cloud Console platform, you can customize and adapt authentication and transaction flows, languages, and appearances and publish them to make them available to your user base.

Works out of the box with any FIDO2 enabled service

DIGIPASS CX solutions support the FIDO2 protocol and work out-of-the box with any FIDO2-enabled service, ensuring a faster time to market.

Plays nicely with other OneSpan solutions

DIGIPASS CX Solutions integrate with other OneSpan back-end solutions and mobile app solutions, enabling you to develop a hybrid deployment model.

Easy to set up

DIGIPASS CX2 works in connected mode via USB, Bluetooth, and NFC. Simply plug in the device via USB. To enable Bluetooth, the device must be paired to the user’s mobile, PC, or other device of choice.

Compliance

PSD2

DIGIPASS CX2 meets the requirements outlined in the revised Payment Services Directive (PSD2) Regulatory Technical Specifications (RTS). DIGIPASS CX2 satisfies the possession factor, and the local biometric constitutes a second factor as mandated by PSD2. DIGIPASS CX2 also supports dynamic linking for transaction authorization, as transaction details can be displayed for user approval.

Cost-efficient solution

Lower cost to entry

Benefit from leading innovative authentication and transaction signing solutions, for less than the price of a cup of coffee per device per month. Simply choose the subscription tier that covers your business needs.

Future-proof your security investment

DIGIPASS CX2 can be securely updated to add new features and functionality. Gain flexibility by choosing a solution that evolves with your business needs or as new compliance regulations come to market.

Reassign subscription to a new user

OneSpan offers a flexible subscription approach that allows you to reassign existing devices to new users.

DIGIPASS CX1

Unrivaled user experience

Passwordless solution

Eliminating passwords improves usability. Remove friction and deploy stronger, more convenient authentication with fingerprint biometrics.

Intuitive to use

DIGIPASS CX1 is intuitive to use. To authenticate, users simply scan their fingerprint. 

Do business, anywhere, anytime

Log on, and sign transactions and documents anywhere, anytime, on any device and in all confidence.

Different connection options

While DIGIPASS CX devices can be connected to the desktop via USB, they are also Bluetooth/NFC-enabled. This means they work seamlessly with any user laptop, desktop computer, tablet, or phone, to ensure maximal user adoption.

Enhanced security

Mitigate social engineering fraud

DIGIPASS CX1 is a phishing-resistant authenticator that enables passwordless authentication. The device works in connected mode, so one-time passwords are never disclosed. Instead, they are encrypted and transferred in the back end. As there are no passwords to phish, there is reduced likelihood of being exposed to schemes that rely on passwords, such as adversary-in-the-middle and adversary-in-the-browser attacks, account takeover, and replay attacks.

Secure communication channel

DIGIPASS CX1 connects to the DIGIPASS Cloud Console. The DIGIPASS Cloud Console is essential for establishing a secure connection with DIGIPASS CX devices. The platform manages the secure communication channel without needing to rely on the security of the underlying transport layers (Bluetooth or WiFi), ensuring message authenticity, confidentiality, and replay resistance.

Flexible, future proof and versatile

Secure remote updates

Secure remote updates can be installed on DIGIPASS CX1 even after the devices have been deployed and distributed. This gives you the flexibility to activate new features, customize your users’ journey, or modify configuration and security parameters to adapt quickly to evolving technology, changing business needs, and ever more sophisticated threats.

One device for different business needs

DIGIPASS CX1 is designed to fulfill different business needs, from authentication and transaction authorization, to document signing and credential storage.

Multi-protocol device

DIGIPASS CX1 supports multiple authentication methods – including FIDO2 and OATH – enabling organizations to secure their applications and services using the appropriate protocol for each environment.

Easy to integrate and manage

End to end lifecycle management

Effortlessly manage the end-to-end lifecycle with the administrator console provided by the Digipass Cloud Console. Easily create, configure, update, delete, and reassign devices to your user base.

Customize authentication and transaction flows

With the Digipass Cloud Console, you can customize and adapt authentication and transaction flows, languages, and appearance, and publish them directly to your users.

Works out of the box with any FIDO2 enabled service

DIGIPASS CX solutions support the FIDO2 protocol and works out-of-the box with any FIDO2 enabled service, ensuring a faster time to market.

Plays nicely with other OneSpan solutions

DIGIPASS CX Solutions integrate with other OneSpan back-end solutions and mobile app solutions, enabling you to develop a hybrid deployment model as needed.

Easy to set up

DIGIPASS CX1 works in connected mode via USB, Bluetooth, and NFC. Simply plug in the device via USB. To enable Bluetooth, the device must be paired to the user’s mobile, PC, or other device of choice.

Cost-efficient solution

Lower cost to entry

Benefit from leading innovative authentication and transaction signing solutions, for less than the price of a cup of coffee per device per month. Simply choose the subscription tier that covers your business needs.

Future proof your security investment

DIGIPASS CX1 can be securely updated to add new features and functionality. Gain flexibility by choosing a solution that evolves with your business needs or as new compliance regulations come to market.

Reassign subscription to a new user

OneSpan offers a flexible subscription approach that allows you to reassign existing devices to new users.