FEITIAN ePass FIDO – FIDO2 Hardware Security Key

FEITIAN ePass FIDO – FIDO2 Hardware Security Key

FEITIAN ePass FIDO is a series of compact hardware security keys designed for strong user authentication, online account protection, and passwordless login and multi-factor authentication.

The key supports the FIDO2 and FIDO U2F standards, allowing it to be used as a physical authentication factor in FIDO-compliant services, applications, and systems. The current A4B and K39 variants are available with USB-A and USB-C connectors, respectively.

The device is recognized by the computer as a standard Human Interface Device (HID), so basic FIDO functionality over USB does not require a dedicated FEITIAN driver. The manufacturer confirms support for Windows, macOS, and Linux, and the current A4B/K39 pages also indicate ChromeOS.

ePass FIDO can be used as an additional component of 2FA (Two-Factor Authentication) or MFA (Multi-Factor Authentication), and thanks to FIDO2, also in passwordless login scenarios. Physical possession of the key significantly reduces the effectiveness of classic phishing and Man-in-the-Middle attacks, as the cryptographic authentication is tied to the relevant service, and the private key is not transmitted to the service during login. FEITIAN recommends devices for use with services from Microsoft, Google, Salesforce, Dropbox, Duo, Okta, and other platforms supporting FIDO.

In addition to FIDO, ePass FIDO devices can implement OTP (One-Time Password) functions, specifically OATH-HOTP, and in some current configurations, TOTP, static passwords, and Challenge-Response. However, the scope of these additional functions depends on the model and firmware version.

Key Features

Hardware Security Key
FIDO2 Support
FIDO U2F Support
WebAuthn Compliance via FIDO2
Can be used for passwordless authentication
2FA Support
MFA Support
Anti-phishing
Man-in-the-Middle Attack Protection
Secure storage of cryptographic material in the hardware security element
Smart Card Secure Element
Cryptographic algorithms including ECDSA and SHA-256
Current USB-A and USB-C variants
Communication via the HID standard
No driver installation required for standard FIDO operation
OATH-HOTP Support
Support for additional OTP methods depending on the model and firmware
A single key can be used with multiple services
Physical confirmation of operations via a button or touch sensor, depending on the housing
Compact Design
Case, color, print, and engraving customization available for OEM orders.

Models/Variants

FEITIAN ePass FIDO A4B – USB-A

The basic version features a classic USB-A connector. Model / Housing: A4B
Connector: USB-A
FIDO2: Yes
FIDO U2F: Yes
CTAP 2.1: Current Firmware Version
OATH-HOTP: Yes
NFC: No
Bluetooth: No
Communication Protocol: HID
FIDO Algorithms: AES, ECDSA, SHA-256
Maximum Number of Resident Credentials According to the Current FEITIAN US Website: 128
Number of OTP Slots According to FEITIAN US: 1
Ingress Protection Rating for the Current A4B: IP67
Dimensions: 44 × 21 × 3 mm
Weight: 2.7 g
Power Supply: via USB
Operating Voltage According to the Datasheet: 5 V DC
Rated Current According to the Datasheet: 35 mA
Power Consumption According to the Datasheet: Approx. 0.17 W
Operating Temperature According to the Datasheet: From -10°C to +60°C
Indication: green LED
Button: touch.

FEITIAN ePass FIDO K39 – USB-C

This variant is designed for computers and devices with a USB-C connector. Model / Housing: K39
Connector: USB-C
FIDO2: Yes
FIDO U2F: Yes
CTAP 2.1: Current firmware version
OATH-HOTP: Yes
OATH-TOTP: Yes according to the current FEITIAN US website
Static Password: Yes
Challenge-Response: Yes
NFC: No
Bluetooth: No
Communication protocol: HID
FIDO algorithms: AES, ECDSA, SHA-256
Maximum number of resident credentials according to the current FEITIAN US website: 26
Number of slots: 2
Dimensions: 42.85 × 14 × 5.5 mm
Weight: 9.4 g
Supported systems: Windows, macOS, Linux, ChromeOS.

Software Required for Operation

Standard FIDO2 / FIDO U2F

No additional software or dedicated FEITIAN driver is required.
The ePass FIDO is recognized as a standard USB HID device, so in typical FIDO2/U2F applications, it works directly with a FIDO-enabled operating system, browser, or application. FEITIAN explicitly states that for Windows, macOS, and Linux, the device does not require a driver when communicating via USB.

FEITIAN SK Manager

The manufacturer provides FEITIAN SK Manager for configuration and management of extended features.

The software allows for, among other things:
FIDO configuration
Setting or changing the FIDO2 PIN
Managing saved credentials
Resetting FIDO functions
Hot Transfer Protocol (HOTP) configuration
Configuring supported OTP functions.

FEITIAN SK Manager does not need to be installed or running for standard FIDO2 login. It is an administration/configuration tool.

FT Authenticator

The manufacturer also provides the FT Authenticator for configuration and use of the OTP function.
FEITIAN offers versions for:
Windows
Android
iOS.
The FT Authenticator is not required for FIDO2 use.

Manufacturer and Country of Origin
Manufacturer: FEITIAN Technologies Co., Ltd.
Manufacturer Country: China

Model: ePass FIDO
Current Variants: A4B / K39
Type: Hardware Security Key
FIDO2: Yes
FIDO U2F: Yes
WebAuthn: Yes
CTAP 2.1: Yes – Current A4B/K39
A4B Interface: USB-A
K39 Interface: USB-C
NFC: No
Bluetooth: No
HID: Yes
HOTP: Yes
TOTP: Depending on model/firmware
Secure Element: Yes
Anti-phishing: Yes
Passwordless: Yes
Dedicated FIDO Driver: No
Configuration Software: FEITIAN SK Manager
OTP Software: FT Authenticator / SK Manager
Systems: Windows, macOS, Linux, ChromeOS

Technical Specifications – ePass FIDO Series
Device Type: Hardware Authentication Key
Manufacturer: FEITIAN Technologies Co., Ltd.
Series: ePass FIDO
Authentication Standard: FIDO2
FIDO U2F: Yes
WebAuthn: Yes, as part of the FIDO2 implementation
Current FIDO Implementation for A4B/K39: CTAP 2.1
Interface: USB
Connector: USB-A or USB-C, depending on the variant
NFC: No – Standard ePass FIDO Series
Bluetooth: No
Communication: HID
Secure Element: Yes
2FA: Yes
MFA: Yes
Passwordless Authentication: Yes
OATH-HOTP: Yes
OATH-TOTP: Depending on the model/firmware
Static Password: Depending on the model/firmware
Challenge Response: Depending on the model/firmware
PIV: No in standard, current configurations A4B; for K39, the manufacturer designates PIV as an optional feature requiring handshaking.
FIDO algorithms: ECDSA, SHA-256; current sales materials also list AES.
Operating systems: Windows, macOS, Linux, ChromeOS.
Dedicated FIDO driver: Not required.
Configuration software: FEITIAN SK Manager.
OTP software: FEITIAN SK Manager / FT Authenticator, depending on the application.