FEITIAN BioPass FIDO2 – FIDO2 biometric security key

FEITIAN BioPass FIDO2 – FIDO2 biometric security key

The FEITIAN BioPass FIDO2 is a series of hardware security keys that utilize fingerprint biometrics for strong user authentication. The solution combines FIDO2, WebAuthn, and FIDO U2F standards with a built-in fingerprint reader, enabling secure logins to online services, applications, and corporate systems without the need for a traditional password.

The key can be used as part of an MFA (Multi-Factor Authentication) setup and for passwordless scenarios, where user identity is verified using the physical key and a fingerprint. FEITIAN highlights compatibility with services utilizing WebAuthn, such as solutions from Microsoft, Google, and Salesforce.

The key feature of the BioPass FIDO2 is its built-in biometric sensor. Fingerprint data is protected by a secure element within the device. According to the manufacturer, the stored biometric data is used solely for comparison against the user's fingerprint and does not allow for the reconstruction of the original fingerprint image.

The BioPass FIDO2 is recognized as a standard HID (Human Interface Device), meaning no special device driver is required for typical FIDO2/WebAuthn usage.

The series includes basic versions, the BioPass FIDO2 Plus, and the more advanced BioPass FIDO2 Pro, which offers additional features such as PIV, HOTP/TOTP, and support for the Windows Biometric Framework.

Key features

hardware-based biometric security key
fingerprint authentication
FIDO2 support
WebAuthn support
FIDO U2F support
passwordless authentication capability
multi-factor authentication (MFA) support
phishing protection
protection against Man-in-the-Middle (MITM) attacks
biometric data stored and protected within the device
built-in Secure Element / Smart Card Secure Element chip
USB-A or USB-C interface (depending on the variant)
no NFC in the manufacturer's BioPass FIDO2 models
no Bluetooth/BLE
identified as a standard USB HID device
single key usable with multiple services and applications
support for additional PIV functions in Plus and Pro variants
HOTP and TOTP support in Pro versions
Windows Biometric Framework support in Pro versions
compact, durable design
metal casing in selected models of the series.

Models and Variants

The current BioPass family page lists four basic configurations:

FEITIAN BioPass FIDO2 K26

USB-C connector
Fingerprint reader
FIDO2
FIDO U2F
No NFC
No Bluetooth
No PIV in the basic configuration
No HOTP
No Windows Biometric Framework support.

FEITIAN BioPass FIDO2 Plus K26+

An enhanced version of the K26, designed for environments requiring smart card functionality, among other uses.
USB-C connector
Fingerprint reader
FIDO2
FIDO U2F
PIV (Personal Identity Verification)
Secure Element
No NFC
No Bluetooth
No HOTP in the standard configuration
No WBF support in the standard configuration.

FEITIAN BioPass FIDO2 Pro K49 Pro

The most feature-rich variant in the series, featuring a USB-C connector.
USB-C connector
Biometric fingerprint reader
FIDO2
FIDO U2F
HOTP
TOTP
PIV
Windows Biometric Framework (WBF)
Seed preloading capability
No NFC
No Bluetooth.

FEITIAN BioPass FIDO2 Pro K50 Pro

Functionally similar to the K49 Pro but equipped with a standard USB-A connector.
USB-A connector
Biometric fingerprint reader
FIDO2
FIDO U2F
HOTP
TOTP
PIV
Windows Biometric Framework (WBF)
Seed preloading capability
No NFC
No Bluetooth.

FIDO2 / CTAP

There is also a generational difference between the models:

BioPass FIDO / BioPass FIDO Plus – the manufacturer classifies older implementations under CTAP 2.0.
BioPass FIDO Pro K49 Pro / K50 Pro – the current firmware version falls under CTAP 2.1.

Required software

Standard FIDO2 / WebAuthn usage

No additional FEITIAN software or dedicated driver is required for standard FIDO2/WebAuthn authentication.

The key operates as a standard HID device and can be handled directly by the operating system, browser, or FIDO2/WebAuthn-compatible application.

This means that once configured, the key can be used—for example—to log in to a compatible service without needing a FEITIAN program running constantly on the computer.

FEITIAN SK Manager

The manufacturer provides FEITIAN SK Manager for advanced configuration.

The program enables, among other things:

FIDO2 configuration
setting and changing the FIDO2 PIN
registering fingerprints
testing stored fingerprints
deleting stored fingerprints
managing FIDO2 credentials
deleting stored credentials
FIDO2 reset
PIV function configuration
managing PIV certificates
configuring fingerprint usage policy for PIV
configuring OTP functions in supported variants

Management without the FEITIAN application

Depending on the operating system, some operations can be performed without installing SK Manager.
The manufacturer notes, among other things, the possibility of using Chrome's built-in security key manager to:
set a PIN
manage fingerprints
manage credentials
reset the device.

PIV

When using the PIV (Personal Identity Verification) function, the situation depends on the operating system and the specific use case.
FEITIAN provides:
FEITIAN SK Manager for PIV configuration
PIV Minidriver for Windows.

The manufacturer notes that the PIV key is a plug-and-play device and the minidriver is not required in every scenario; however, the current SK Manager manual recommends installing the PIV Minidriver on Windows to utilize PIV functionality.

Windows Biometric Framework – Pro versions

When using the K49 Pro/K50 Pro as a biometric login device in Windows via the Windows Biometric Framework (WBF), the appropriate FEITIAN WBF driver is required.
The manufacturer confirms support for:
Windows 7
Windows 8
Windows 10
Windows 11
for the specified local/on-premise Windows login scenario.

Manufacturer and country of origin
Manufacturer: FEITIAN Technologies Co., Ltd.
Brand: FEITIAN
Manufacturer headquarters: Beijing, China
Manufacturer's country of origin: China

Abbreviated specifications

Manufacturer: FEITIAN Technologies Co., Ltd.
Series: BioPass FIDO2
Type: biometric hardware security key
User authentication: fingerprint
Standard: FIDO2 / WebAuthn
FIDO U2F: yes
MFA: yes
Passwordless: yes
Interface: USB-A or USB-C
NFC: no
Bluetooth: no
PIV: K26+ / K49 Pro / K50 Pro
HOTP: K49 Pro / K50 Pro
TOTP: K49 Pro / K50 Pro
WBF: K49 Pro / K50 Pro
Secure Element: yes
Dedicated driver for FIDO2: no
Configuration software: FEITIAN SK Manager
PIV Minidriver: depends on PIV usage in Windows
WBF Driver: required when using WBF functionality on Pro models

Technical specifications

Device type: hardware biometric authentication key
User verification method: fingerprint
Authentication standard: FIDO2
Compatibility: FIDO U2F
Application standard: WebAuthn
Computer communication: USB
Connector: USB-A or USB-C, depending on the model
NFC: no
Bluetooth/BLE: no
FIDO communication method via USB: HID / CTAPHID
Secure Element: yes
Passwordless authentication support: yes
MFA support: yes
PIV support: depends on the version
HOTP support: Pro versions
TOTP support: Pro versions
Windows Biometric Framework (WBF) support: Pro versions
Biometric support: all BioPass variants listed on the manufacturer's website
Cryptographic algorithms for the product family: AES, HMAC, ECDH; documentation for earlier BioPass models also lists ECDSA and SHA-256
Status indication: LED

Fingerprint reader specifications

In the BioPass FIDO2 technical documentation for the K26/K27 models, the manufacturer specifies:

Sensor type: FPC Fingerprint Sensor
Sensor resolution: 160 × 180 pixels
Resolution: 508 DPI
Recognition time: under 0.6 s
Fingerprint capture time: under 180 ms
FAR (False Acceptance Rate): under 0.001%
FRR (False Rejection Rate): under 1%
Sensor lifespan: over 200,000 uses
Self-learning function: yes K26 electrical and environmental specifications

For the BioPass FIDO2 K26, the official manufacturer documentation lists:

input voltage: 5.0 V
standby current consumption: approx. 34 mA
maximum current consumption: approx. 44 mA
standby power consumption: approx. 0.17 W
maximum power consumption: approx. 0.22 W
operating temperature: -10°C to +50°C
storage temperature: -20°C to +70°C
casing material: zinc alloy and PC+ABS plastic
K26 USB-C dimensions: 50.9 × 18.5 × 7 mm.