Digipass® FX2

Phishing-resistant authentication for modern threats

Digipass FX2 delivers advanced protection against phishing, social engineering, and account takeover attempts by fusing two industry-leading technologies:

• Cronto® technology uniquely binds each transaction to its authorization, making tampering virtually impossible.
• FIDO2 passwordless authentication replaces static credentials with secure, device-bound authentication reinforced by a proximity check.​ Each authentication is cryptographically bound to the legitimate service domain. This means attackers cannot trick users into approving a login or transaction on a fraudulent site, nor relay their credentials elsewhere.​

This powerful combination eliminates passwords, neutralizes common attack vectors, and ensures that approvals are always tied to a cryptographically verified user and device.

What you see is what you sign​

​Digipass FX2 provides transaction integrity through its 'what you see is what you sign' (WYSIWYS) capability.

WYSIWYS enables a user to verify the exact content of a transaction before approving it. This feature displays transaction details, such as the amount, recipient name, and account number, on a trusted display.​

Users can view and verify those details on the Digipass FX2's trusted display before authorizing the transaction. This reassures users and prevents adversary-in-the-browser attacks.

End-to-end integrity for every financial transaction

Dynamic linking in Digipass FX2 elevates transaction security by cryptographically binding the details of a transaction – such as amount, account number, and recipient – to the transaction’s digital signature.

The secure channel ensures that the content of the transaction cannot be intercepted or altered before it is displayed on the trusted device.

As such, the user’s approval is a cryptographically bound confirmation of the precise information presented at the time of signing. If any part of the transaction data is altered after the user confirms, the cryptographic signature becomes invalid and the transaction is automatically rejected.

This prevents attackers from modifying transaction details after the user signs off, making replay attacks and credential hijacking virtually impossible.

Built for global compliance and beyond

Digipass FX2 helps financial institutions meet and exceed compliance requirements under PSD2, PSD3, and other global regulations.

Its strong customer authentication (SCA) capabilities, combined with end-to-end security assurances, enable a scalable, future-proof approach to fraud prevention designed to meet the highest regulatory expectations.