NEOWAVE Winkeo-C FIDO2 – USB-C FIDO2 / U2F Security Key

NEOWAVE Winkeo-C FIDO2 – USB-C FIDO2 / U2F Security Key

The NEOWAVE Winkeo-C FIDO2 is a compact USB-C hardware security key designed for strong user authentication in online services, cloud services, and enterprise applications. The device supports the FIDO2 (CTAP 2.0) and FIDO U2F standards, allowing it to be used as a second factor for 2FA/MFA authentication as well as for passwordless login in compatible systems.

The key can be used with computers, smartphones, and tablets equipped with a USB-C port. It supports Windows, macOS, Linux, Android, and iOS, as well as popular web browsers. The manufacturer states compatibility with Microsoft Entra ID, Okta, Ping Identity, Evidian, and Ilex, as well as over 250 online services, including Gmail, PayPal, OVH, WordPress, and Dropbox.

Winkeo-C FIDO2 uses asymmetric cryptography. Credentials are generated, managed, and stored within a secure smart card component, ensuring that private cryptographic keys never leave the device. The key is certified by the smart card component according to Common Criteria EAL5+ and has received the French ANSSI Security Visa – CSPN certification.

The device does not require the installation of a dedicated driver or application on the user's workstation. It operates as a Human Interface Device (HID) in FIDO2/WebAuthn or FIDO U2F-compliant systems and services.

Software Required for Operation

For standard use of the NEOWAVE Winkeo-C FIDO2, no additional software or dedicated drivers are required.

The device operates as a USB HID device.

Additional manufacturer driver: not required.
Additional NEOWAVE application for basic FIDO2 functionality: not required.
An application, operating system, browser, or service that supports FIDO2/WebAuthn or FIDO U2F is required.
In a Microsoft Entra ID environment, the administrator must first enable and configure the appropriate FIDO2 authentication method.
Setting, changing, and resetting the PIN in Windows can be performed using Windows system functions.
In Linux, the NEOWAVE manual indicates that a Udev rule may need to be added for browser access to the device.

NEOWAVE OTP Manager is not specified by the manufacturer as required software for the Winkeo-C FIDO2. It is a FIDO2/U2F model, not a FIDO2 + OTP variant.

Models and Variants

NEOWAVE Winkeo-C FIDO2
USB-C interface
FIDO2 CTAP 2.0
FIDO U2F
Common Criteria EAL5+
ANSSI Security Visa
Weight: 3 g

NEOWAVE Winkeo2-C FIDO2
USB-C
FIDO2 CTAP 2.0
FIDO U2F
Another model in the Winkeo2 family

NEOWAVE Winkeo2J-C FIDO2
Newer generation
USB-C
FIDO2 CTAP 2.1
FIDO U2F
FIDO2 Level 2
Model designed for newer deployments requiring CTAP 2.1

NEOWAVE Winkeo2J-A FIDO2
USB-A
FIDO2 CTAP 2.1
FIDO U2F
FIDO2 Level 2

Other variants of the NEOWAVE FIDO2 family
Badgeo KF FIDO2 – NFC Keychain
Badgeo Dual FIDO2 – Contactless NFC Card
Badgeo NFC FIDO2 – Contactless NFC Card
FIDO2 + OTP Series – Models Combining FIDO2 with HOTP/TOTP
FIDO2 + QSCD Series – Models Combining FIDO2 with PKI and Qualified Electronic Signature Creation Device Functions

Applications

Passwordless login to FIDO2-compliant services
Hardware-based user authentication
MFA – Multi-Factor Authentication
2FA – Two-Factor Authentication
Account protection against phishing
Securing Microsoft Entra ID environments
Securing Okta accounts
Protecting access to SaaS applications
Securing cloud services
Securing administrator accounts
Securing privileged users
Authenticating employees using computers and mobile devices
Replacing weaker second-factor methods, such as SMS or one-time OTP codes, in services that support FIDO2/U2F.

Manufacturer and Country of Origin
Manufacturer: NEOWAVE
Brand: NEOWAVE
Model: Winkeo-C FIDO2
Family: NEOWAVE FIDO2
Product Type: Hardware Security Key
Manufacturer's Headquarters: Gardanne, France
Country of Origin/Manufacturing: France
NEOWAVE declares its FIDO2 product family: "100% Made in France"
Marking: Cybersecurity Made in Europe

Technical Specifications
Device Type: Hardware Authentication Key
Interface: USB-C HID
Supported Ports: USB 2.0 and USB 3.x Type-C
Authentication Standard: FIDO2
Protocol: CTAP 2.0
Support: FIDO U2F
Passwordless Login: Yes
Passkeys Support in FIDO2-Compliant Services: Yes
Two-Factor Authentication (2FA): Yes
Multi-Factor Authentication (MFA): Yes
Anti-Phishing Protection: Yes
Password Hacking Protection: Yes
Credential Generation: Inside the Smart Card Component
Credential Management: Inside the Smart Card Component
Credential Storage: Inside the Smart Card Component
FIDO2 Cryptographic Mechanism: ECC P-256
Algorithms Supported by the Smart Card Component: DES/3DES, AES, ECC, RSA
No key wrapping: yes
No factory-shared cryptographic key: yes
User presence confirmation: physical button/gold touchscreen
PIN support: yes
PIN length: 4 Unicode characters to 63 bytes
Maximum number of consecutive incorrect PIN attempts: 8
Authenticator reset required after 8 failed attempts
Default PIN: none
Resident Keys / Discoverable Credentials: yes
hmac-secret extension: yes
credProtect: yes

Credential Capacity
According to the current NEOWAVE user manual:
up to 1024 FIDO U2F keys
up to 1024 FIDO2 keys
up to 256 resident keys
all private keys are stored internally
the device does not use key wrapping to store private keys

Certifications and Security
smart card component: Common Criteria EAL5+
French ANSSI Security Visa
CSPN certificate: ANSSI-CSPN-06/2022
marking: Cybersecurity Made in Europe
FIDO2 architecture based on asymmetric cryptography
private keys stored internally
resistance to typical phishing attacks aimed at stealing login credentials

Dimensions and Weight
length: 23.5 mm
length with cover: 26.1 mm
width: 14.4 mm
thickness: 6.5 mm mm
Weight: 3 g

Supported Operating Systems
Microsoft Windows
Windows 10
Windows 11
macOS
Linux
Android
iOS
Supported Browsers
Google Chrome
Microsoft Edge
Mozilla Firefox
Safari

The manufacturer's instructions also list Chromium, Vivaldi, and Opera browsers.

Compatible solutions and services
Microsoft Entra ID
Microsoft Windows 10 / 11
Microsoft 365 / Office 365 in appropriately configured environments
Okta
Ping Identity
Evidian
Ilex
Gmail
Dropbox
PayPal
OVH
WordPress
Amazon Web Services
Microsoft Azure
Google Cloud Platform
GitHub
GitLab
Salesforce
1Password
Bitwarden
other services supporting FIDO2/WebAuthn or FIDO U2F