Stop account takeover attacks and protect employees, partners and corporate resources with DIGIPASS FX1 BIO.

5 minute read


Secure and convenient
  • FIDO2-certified device enables passwordless authentication directly in the browser
  • Biometric authentication eases the user experience
  • Phishing-resistant authenticator protects against password-based attacks
  • USB, NFC, and Bluetooth-enabled to support users’ authentication preferences

Stop account takeover attacks and protect employees, partners, and corporate resources with DIGIPASS FX1 BIO. Eliminate passwords, enable faster logins, and enhance employee productivity. Protect your accounts against social engineering and replay attacks with FIDO-enabled phishing-resistant authentication that works out-of-the-box with hundreds of FIDO2-compatible services.

With DIGIPASS FX1 BIO, security leaders can enable a 'work from anywhere, on any device' policy without weakening the organization's posture.

DIGIPASS FX1 BIO offers the ideal multi-factor authentication (MFA) solution to protect against social engineering, adversary-in-the-middle attacks, and replay attacks, preventing account takeover and unauthorized access to company resources.

This OneSpan authenticator offers the highest assurance security and the best user experience, helping organizations to maintain productivity and alleviate the burden on IT, while simultaneously protecting employees against phishing attacks and account takeover.

Mitigate account takeover, go passwordless

Digital transformation initiatives and the shift to hybrid work has expanded the potential attack surface for cybercriminals. Social engineering attacks are increasing in volume and sophistication, raising concerns about how to efficiently protect their workforce from credential theft and account takeover incidents.

Organizations are undergoing a significant paradigm shift in response to constantly evolving fraud schemes and regulation requirements around user and data safety. Phishing-resistant passwordless MFA is a standard all businesses should strive for. Deploying passwordless authentication greatly enhances an organization's security posture and helps protect users and corporate resources from unauthorized access.

DIGIPASS FX1 BIO is a phishing-resistant authenticator that enables passwordless authentication. The device works in connected mode, so one-time passcodes are never disclosed. Since there are no passwords to phish, this greatly reduces the likelihood of being exposed to phishing schemes that rely on passwords, such as adversary-in-the-middle attacks, adversary-in-the-browser attacks, account takeover attacks, and replay attacks.

Create an unrivalled user experience

DIGIPASS FX1 BIO is designed with the user in mind. Passwordless authentication removes the first and often largest hurdle – remembering passwords. The fingerprint biometric offers an intuitive user experience.

DIGIPASS FX1 BIO is a USB, NFC, and Bluetooth enabled authenticator giving customers the choice to select their preferred authentication method. This authenticator can be used with any other mobile device since a USB port is not mandatory, furthering large-scale adoption.

How it works

Passwordless authentication puts an end to phishing and other social engineering attacks as hackers are unable to phish passwords. The physical possession of your DIGIPASS FX1 BIO is required to gain access to an online service.

Connect your DIGIPASS FX1 BIO passkey to any device via USB, NFC, or Bluetooth and scan your fingerprint on the DIGIPASS FX1 BIO fingerprint sensor, it is as simple as that.

The passwordless login relies on FIDO2, an open standard supported by Google Chrome, Apple Safari, Mozilla Firefox, and Microsoft Edge and uses public key cryptography.

Credentials are never exposed over any network and can be further protected with a PIN and optional fingerprint as a second factor if required by the web service.

Logon to Windows, Microsoft Azure AD 365, and any FIDO2-enabled service

DIGIPASS FX1 BIO replaces the username and password combo to sign-in on Windows 10 and the cloud version of Microsoft Azure AD 365 and any FIDO2-enabled web service, including those of various IAM providers.

Easy to setup

DIGIPASS FIDO FX1 BIO is a Bluetooth and NFC enabled hardware device and can be connected to your mobile device or laptop via USB.

Installation via PC is straightforward: simply connect the device to the computer via USB. To connect via Bluetooth, you will need to pair your device with the mobile, PC, or platform you wish to connect to.

Upon first use you will be asked to set your PIN code and register your fingerprint. After the PIN is set, you will be able to log on any FIDO2-enabled service. No additional drivers need to be installed, ensuring a frictionless and intuitive user experience, resulting in a higher user acceptance.

Cost-efficient solution

FIDO authentication offers an interoperable and standardized ecosystem of authenticators for use with online applications. It enables organizations to deploy strong authentication for login, without the incremental cost of in-house development.


  • Size: 35mm (49.5 w/cable) (L) x 35(W) x 10.8mm(H)
  • Weight: 11g
  • Fingerprint Sensor: Capacitive
  • Bluetooth: Bluetooth 5.2 LE (Low Energy)
  • NFC: ISO 14443 / card-emulation mode / extended APDU support
  • FIDO: Support for FIDO U2F, FIDO2, and passkeys
  • Battery: Rechargeable - 65 mAh
  • Cable: Integrated USB-C cable
  • Power Supply in Connected Mode: Via USB-C, 4.75 to 5.50 volts
  • Dust and Water Resistance: Dust-safe and splashproof


Short-term Storage Temperature

-10°C to 50°C;

90% RH non-condensing

IEC 60068-2-78 (damp heat)

IEC 60068-2-1 (cold)

Operating Temperature

0°C to 45°C;

85% RH non-condensing

IEC 60068-2-78 (damp heat)

IEC 60068-2-1 (cold)


10 to 75 Hz; 10 m/s2

IEC 60068-2-6


1 meter

IEC 60068-2-31





4 kV contact discharges
8 kV air discharges
3 V/m from 80 to 1000 MHz


Compliant with European Directives

CE: 89/336/EEC or 2004/108/EC
RoHS: 2002/95/EC
WEEE: 2002/96/EC

Compliant with Federal Communications Commission

FCC ID: 2AH88-1200
IC: 27700-1200