NEOWAVE FIDO2 + OTP – FIDO2 Security Keys and Cards with HOTP/TOTP Support

NEOWAVE FIDO2 + OTP – FIDO2 Security Keys and Cards with HOTP/TOTP Support

NEOWAVE FIDO2 + OTP is a family of strong authentication hardware devices that combines the modern FIDO2 / Passkeys standard with classic OTP (One-Time Password) mechanisms. These products are designed to secure access to online services, cloud applications, and enterprise systems.

The devices support FIDO2 CTAP 2.1, FIDO U2F, HOTP, and TOTP, allowing them to be used for both phishing-resistant passwordless login and in environments that still require OTP one-time codes. FIDO2 credentials and OTP secrets are generated and stored within the secured smart card component.

Products in the current FIDO2 + OTP family are FIDO2 Level 2 certified and utilize Common Criteria EAL6+ certified Java Card components. The manufacturer also declares the "Made in Europe" Cybersecurity mark.

FIDO2 / CTAP 2.1 Features
credProtect
hmac-secret
Resident Keys / Discoverable Credentials
credBlob
largeBlobKey
largeBlobs
minPinLength
pinUvAuthToken
Enterprise Attestation
authnrCfg
credMgmt
setMinPINLength
makeCredUvNotRqd
alwaysUv
noMcGaPermissionsWithClientPin
User PIN support
PIN Protocol 1 support
PIN Protocol 2 support
PIN length: from 4 Unicode characters to 63 bytes
Maximum number of consecutive incorrect PIN attempts: 8
Authenticator reset is required after the limit is exceeded.
No default PIN.
Ability to apply specific PIN policies.
Resident credentials use approximately 200–512 bytes of memory per credential, depending on configuration.

Available Models and Variants

NEOWAVE Winkeo2J-A FIDO2 + OTP

Hardware security key with a USB-A interface, designed primarily for desktop computers and notebooks.
Connector: USB-A
Interface: USB-A 2.0 HID / PC/SC
FIDO2: CTAP 2.1
FIDO U2F: Yes
OTP: HOTP/TOTP
Certification: FIDO2 L2
Component: Java Card micro-SIM
Common Criteria: EAL6+
Operating Systems: Windows, macOS, Linux
Browsers: Chrome, Edge, Firefox, Safari
Length: 43.8 mm
Width: 18 mm
Height: 9.76 mm
Weight: 6 g

NEOWAVE Winkeo2J-C FIDO2 + OTP

USB-C variant, suitable for modern notebooks, workstations, and compatible mobile devices. Connector: USB-C
Interface: USB-C 2.0 HID / PC/SC
FIDO2: CTAP 2.1
FIDO U2F: yes
OTP: HOTP/TOTP
Certification: FIDO2 L2
Component: Java Card micro-SIM
Common Criteria: EAL6+
Operating systems: Windows, macOS, Linux, Android, iOS
Browsers: Chrome, Edge, Firefox, Safari
Length: 39.7 mm
Width: 18 mm
Height: 8.25 mm
Weight: 5 g

NEOWAVE Badgeo Dual FIDO2 + OTP

A smart card with contact and contactless/NFC interfaces, allowing a single card to be used in both computer systems and NFC-enabled environments. Type: Dual-Interface Smart Card
Contact Interface: ISO/IEC 7816
Contactless/NFC Interface: Yes
MIFARE: Yes
DESFire EV2/EV3: Yes
Optional Contactless Technologies: ISO 15693 and 125 kHz
FIDO2: CTAP 2.1
FIDO U2F: Yes
OTP: HOTP/TOTP
Certification: FIDO2 L2
Java Card Component: Common Criteria EAL6+
Manufacturer-recommended operating systems: Windows, Android, iOS
Browsers: Chrome, Edge, Firefox, Safari
Dimensions: 85.6 x 54 x 0.76 mm
Weight: 5 g.

When using a contact interface, a suitable smart card reader is required, while for contactless communication, a device or reader supporting the appropriate NFC standard is required.

NEOWAVE Badgeo NFC FIDO2 + OTP

Contactless smart card designed for mobile and stationary environments using NFC.
Type: Contactless smart card
Interface: ISO/IEC 14443-A
NFC: Yes
DESFire EV2/EV3: Yes
Optional: ISO 15693
Optional: 125 kHz
FIDO2: CTAP 2.1
FIDO U2F: Yes
OTP: HOTP/TOTP
Certification: FIDO2 L2
Component: Java Card
Common Criteria: EAL6+
Operating systems: Windows, Android, iOS
Browsers: Chrome, Edge, Firefox, Safari
Dimensions: 85.6 x 54 x 0.76 mm
Weight: 5 g

Software Required for Operation

A significant advantage of the NEOWAVE FIDO2 + OTP family is the separation of FIDO and OTP functions.

For FIDO2 / FIDO U2F,
No NEOWAVE software installation required.
Dedicated manufacturer driver: not required.
The device uses standard FIDO2 / WebAuthn mechanisms.
A compatible operating system, browser, or application is required.
In a corporate environment, the administrator must configure FIDO2 in the IAM platform used, such as Microsoft Entra ID or Okta.
For HOTP/TOTP,
Software Required: NEOWAVE OTP Manager.
Currently, the manufacturer provides OTP Manager version 2.1.0.
Windows version: available.
macOS version: available.
Linux version: available.
This application manages OTP functionality at the user's workstation.
Installers and installation instructions are provided by NEOWAVE.

SafeSign Identity Client is not required for this FIDO2 + OTP family. This middleware is primarily associated with NEOWAVE PKI/QSCD products. For OTP functionality, the appropriate application is NEOWAVE OTP Manager.

Applications
Passwordless login
Passkeys
Strong user authentication
MFA – Multi-Factor Authentication
2FA – Two-Factor Authentication
HOTP
TOTP
FIDO2 authentication
FIDO U2F authentication
Anti-phishing
Protecting accounts from password hijacking
Securing Microsoft Entra ID
Securing Okta environments
Securing SaaS applications
Securing cloud services
Securing administrator access
Protecting privileged users
Migrating from SMS authentication to stronger hardware methods
Environments where some systems support FIDO2 but legacy applications still use HOTP/TOTP
Enterprises
Public administration
Healthcare
Organizations requiring strong digital identity protection. The series' key advantage

The greatest value of the NEOWAVE FIDO2 + OTP is the ability to use a single hardware authenticator across two generations of authentication environments: the modern FIDO2/Passkeys and legacy systems using HOTP/TOTP. This can be particularly useful during a gradual enterprise migration from OTP to phishing-resistant authentication. This is a functional benefit resulting from the simultaneous support of both standards by the devices.

Manufacturer and Country of Origin
Manufacturer: NEOWAVE
Brand: NEOWAVE
Manufacturer Country: France
Headquarters: Gardanne, France
Design Country: France
Production Country: France
Manufacturer Declares: 100% Made in France
Segment: Cybersecurity / Identity and Access Management / Strong Authentication
Product Family: FIDO2 + OTP
Product Type: Hardware USB Keys and Smart Cards
Label: Cybersecurity Made in Europe

NEOWAVE FIDO2 + OTP Family Technical Specifications
Standard: FIDO2
Protocol: CTAP 2.1
Support: FIDO U2F
OTP Support: Yes
HOTP Support: Yes
TOTP Support: Yes
FIDO Certification: FIDO2 Level 2 – L2
Passwordless Login: Yes
Passkeys Support: Yes
Two-Factor Authentication 2FA: yes
MFA multi-factor authentication: yes
Anti-phishing: yes
Password theft protection: yes
FIDO cryptography: asymmetric
Private key: stored on-device
FIDO credential generation: inside the smart card
FIDO credential storage: inside the smart card
OTP secret generation and storage: inside the smart card
Security component: Java Card
Component certification: Common Criteria EAL6+
FIDO signature algorithm: ECC P-256 / secp256r1
Key wrapping: not required / private key remains on the device
Fido2 core functionality software: not required
OTP software: NEOWAVE OTP Manager
Supported browsers: Chrome, Edge, Firefox, Safari.

OTP Features
HOTP – HMAC-based One-Time Password
TOTP – Time-based One-Time Password
TOTP: 30 or 60-second code validity period
HOTP: Configurable start timer
OTP code length: 6–8 digits
SHA-1
SHA-256
SHA-512
OTP secrets stored within the device's secured component
OTP functionality managed using NEOWAVE OTP Manager.

Compatibility
The manufacturer indicates compatibility with:
Microsoft Entra ID
Windows 10
Windows 11
Okta
Ping Identity
Evidian
Ilex
Gmail
PayPal
OVH
WordPress
Dropbox
over 250 web services supporting relevant FIDO standards
other Identity Federation/IAM solutions compliant with FIDO2.