Move beyond passwords

Passwords are cumbersome, and we hate to remember them. Users struggle to remember passwords for different accounts resulting in password resets and costly helpdesk calls. Password reuse offers no solution and puts user accounts at risk for account takeover once the password is compromised. As much as 80% of large-scale data breaches and credential thefts can be attributed to insecure passwords. The answer to this dilemma: forget passwords!

Digipass FIDO Touch provides passwordless authentication allowing users to securely logon to online services and perform banking transactions via mobile or desktop. Digipass FIDO Touch works out-of-the-box with any service supporting FIDO2 authentication protocols.

Simplify the customer experience

Digipass FIDO Touch is designed with the user in mind. Passwordless authentication removes the first and often largest hurdle — remembering passwords. The touch screen offers an intuitive user experience. Digipass FIDO Touch is a USB and Bluetooth-enabled authenticator giving customers the choice to select their preferred authentication method. It also enables the device to be used with any other mobile device as a USB port.

How it works

Passwordless authentication puts an effective end to phishing and other social engineering attacks as hackers are unable to phish usernames or passwords. The physical possess

The passwordless login relies on FIDO2, an open standard supported by Google Chrome, Apple, Mozilla Firefox, and Microsoft Edge, and uses public key cryptography.

Your personal private keys live on Digipass FIDO Touch while the public keys are stored on the FIDO2-enabled servers. For each service, a unique key pair is created. Simply connect Digipass FIDO Touch to any device via USB or Bluetooth and enter your PIN on the touch screen. In the background, your private key will be used to sign a challenge and is sent back and matched with the public key stored on the server.

Enhanced security

Digipass FIDO Touch provides secure modern authentication with a high level of security using public key cryptography. Credentials are never exposed over any network and are protected with the PIN as a second factor. The PIN is entered directly on the display of the device which increases overall security.

Digipass FIDO Touch provides the maximum level of protection. Cryptographic private keys are generated onboard in the embedded hardware security element and never leave the device.

The solution protects against a variety of known and potential attacks, including PIN brute-force attacks. After too many incorrect guesses, the device is locked.

Enable PSD2 compliancy

Digipass FIDO Touch provides a fast and simple way to help you meet PSD2 compliancy by eliminating passwords and shared secrets. Fulfilling PSD2’s Strong Customer Authentication requirements across your mobile and web applications is a breeze. Logging on with Digipass FIDO Touch satisfies the possession factor and the local PIN verification constitutes a second factor as mandated by PSD2. Digipass FIDO Touch equally supports dynamic linking for transaction authorization as transaction details can be presented on the display for user approval. Created with privacy and security in mind, no personal identifiable information is ever stored on the device or sent to the server.

Logon to Windows and Microsoft Azure AD

Digipass FIDO Touch replaces the username and password combo to sign-in to Windows 10 and the cloud version of Microsoft Azure AD. Via the display, the enduser can select his credential to log on to multiple domains or applications. Off-line connection is also supported.

Easy to setup

Digipass FIDO Touch is a Bluetooth enabled hardware device and can be connected to your desktop via USB. Installation via PC is straightforward; simply connect the device to the computer via USB. To enable Bluetooth, you will need to pair your device with the mobile, PC, or platform you wish to connect to.

Upon first use, you will be asked to set your PIN code. After the PIN is set, you will be able to log on or sign transactions on any FIDO2-enabled service. No additional drivers need to be installed, ensuring a frictionless and intuitive user experience, which in turn results in a higher user acceptance.

Cost-efficient

FIDO authentication offers an interoperable and standardized ecosystem of authenticators for use with mobile and online applications. It enables organizations to deploy strong authentication for login and transaction validation, without the incremental cost of in-house development.

 

---

*Long term storage for devices with rechargeable batteries should be limited to 1 year after production date. After each year, the battery of the unit must be fully recharged before it can be stored for another year. It is not recommended to fully charge a LiPo for storage. It is bad for the cell to store it fully charged. Charge to 3.8V for storage.