Datasheet

OneSpan Digipass® FX2

Digipass FX2 authenticator

Highlights

Stop account takeovers, reduce social engineering, and safeguard customer trust with cutting-edge authentication. Designed to tackle advanced threats, Digipass® FX2 offers phishing resistance, passwordless security, and a seamless "what you see is what you sign" (WYSIWYG) experience. By combining FIDO2 protocols with Cronto® technology, Digipass FX2 ensures a frictionless and secure digital journey for banks and their customers.

Secure and convenient

  • Phishing-resistant authentication: Eliminates passwords and secures authentication with encrypted, tamper-resistant channels.
  • Multi-protocol support: Enables FIDO2, OATH, and Cronto® technologies for flexible, compliant security.
  • What You See Is What You Sign (WYSIWYG): Transaction details are displayed visually on a trusted device, preventing tampering.
  • USB, NFC, and Bluetooth-enabled to support users' authentication preferences.

Revolutionize security with next-gen technology

Digipass FX2 introduces a groundbreaking approach to digital banking security, integrating three industry-leading technologies: OneSpan's Digipass Cronto® visual cryptogram and FIDO2 protocols. This synergy creates a phishing-resistant, passwordless solution that sets a new standard for transaction security. Digipass FX2 ensures the highest level of assurance, safeguarding users from social engineering, phishing-in-the-middle (AitM), and replay attacks.

As a first-of-its-kind solution, it empowers financial institutions to future-proof their security infrastructure while delivering a seamless, user-friendly experience tailored to meet global compliance standards.

Unparalleled phishing resistance

In the current threat environment, banks of all sizes need more sophisticated methods to protect accounts and transactions from evolving social engineering attacks, unauthorized access, and account takeover attempts. Digipass FX2 redefines phishing resistance by leveraging Cronto technology's visual cryptogram and FIDO2's robust authentication framework. Unlike conventional methods, it eliminates static passwords and OTPs, drastically reducing vulnerability to cyberattacks. Each transaction is dynamically linked and visually confirmed on a secure device display, ensuring no unauthorized changes can occur. By deploying this solution, financial institutions can effectively neutralize threats like AitM attacks, which often rely on stolen credentials, and maintain the authenticity of every user interaction.

Contextual transaction validation

Financial fraud often hinges on subtle tampering with transaction details. With its "What You See Is What You Sign" (WYSIWYG) capability, Digipass FX2 enables users to visually confirm transaction specifics on a trusted display before approval. This transparency reassures users and prevents adversarial-in-the-browser (AitB) attacks, ensuring every transaction's authenticity. By deploying a solution with the highest level of contextual validation, banks can trust in the authenticity and integrity of online transactions and user accounts.

Passwordless Authentication for the Ultimate User Experience

Say goodbye to passwords and cumbersome authentication methods. Digipass FX2's passwordless approach combines biometric authentication with an intuitive, trusted display for a seamless user experience. Users can verify and approve transactions with confidence, enhancing trust and transparency. Its multi-channel connectivity via USB, Bluetooth, and NFC allows effortless integration with any device, from smartphones to desktops. Digipass FX2 sets the bar for delivering a user experience that's as secure as it is intuitive.

Cutting-edge security with dynamic linking

Dynamic linking, a core component of Digipass FX2, offers unmatched protection against evolving threats. By securely linking transaction details to their cryptographic authorization, this technology ensures integrity at every stage.

Paired with the unique capabilities of Cronto's cryptogram and FIDO2's secure key storage, Digipass FX2 creates an environment where phishing attempts, man-in-the-middle attacks, and fraud are rendered ineffective. This state-of-the-art solution provides banks with a scalable, zero-footprint approach to secure transactions.

Stay compliant with global financial services regulations

Digipass FX2 is built to exceed the strictest regulatory standards, such as PSD2 and PSD3, while offering unparalleled security and ease of use. By integrating Cronto and FIDO2 technologies, it delivers the highest level of authentication assurance available on the market.

This new technology addresses the unique challenges of financial institutions worldwide, equipping them with a future-proof strategy to combat social engineering fraud and deliver peace of mind to their customers.

Digipass FX2 helps you to stay ahead of the curve to provide your organization and customers with secure financial transactions you can trust and rely on.

Easy to setup

Digipass FX2 is a Bluetooth and NFC-enabled hardware device and can be connected to your mobile device or laptop via USB.

Installation via PC is straightforward: simply connect the device to the computer via USB. To connect via Bluetooth, you will need to pair your device with the mobile, PC, or platform you wish to connect to.

No additional drivers need to be installed, ensuring a frictionless and intuitive user experience, resulting in a higher user acceptance.

TECHNICAL SPECIFICATIONS

Size

95.5mm (L) x 58.5mm (W) x 9.6mm (H)

Weight

41g

Display

Capacitive touch color display with backlight 2.4-inch display area - IPS - 240 x 320 resolution

Fingerprint Sensor

Capacitive

Bluetooth

Bluetooth v2.1 LE (Low Energy)

NFC

ISO 14443 / card-emulation mode / extended APDU support

FIDO

Support for FIDO U2F, FIDO2, and passkeys

FIPS

FIPS 140-2 Level 3

Battery

Rechargeable, ~300 mAh

Cable

USB-C cable 1 meter (optional)

Power Supply in Connected Mode

Via USB-C: 4.75 to 5.50 volts

Language

Multilingual Support

Tampering

Tamper evident ISO/IEC541-1

Dust & Water Resistance

Dust-web and splashproof

CERTIFICATION AND COMPLIANCE

Short-term storage temperature

  • -10° C to 60° C
  • 90% RH non-condensing
  • IEC60068-2-78 (damp heat)
  • IEC60068-2-1 (cold)

Operating temperature

  • 0° C to 40° C
  • 85% RH non-condensing
  • IEC 60068-2-78 (damp heat)
  • IEC60068-2-1 (cold)

Vibration

  • 10 to 75 Hz
  • 10 m/s2
  • IEC 60068-2-6

Drop

  • 1 meter
  • IEC 60068-2-31

Emission

  • EN55032:2015 + A11:2020

Immunity

  • A.V contact discharge
  • 8 kV air discharge
  • 3 V/m from 80 to 1000 MHz
  • EN55035:2017 + A11:2020

Compliant with European Directives

  • CE: 89/336/EEC or 2004/108/EC
  • RoHS: 2011/65/EU
  • WEEE: 2012/19/EU
  • REACH: NO1907/2006

Compliant with Federal Communications Commission

  • FCC ID: 2ANIBB-FX2B
  • IC: 25770A-FX2B