NEOWAVE Winkeo2-C FIDO2 – sprzętowy klucz bezpieczeństwa USB-C

NEOWAVE Winkeo2-C FIDO2 – USB-C Hardware Security Key

The NEOWAVE Winkeo2-C FIDO2 is a compact USB-C hardware security key designed for strong user authentication on computers, tablets, and smartphones. It supports the FIDO2 (CTAP 2.0) and FIDO U2F standards, allowing it to be used for both passwordless login and as a second factor in 2FA/MFA authentication.

The device provides protection against phishing and password compromise. Authentication data is generated, managed, and stored within a secure smart card component. The private key never leaves the device, reducing the risk of compromise. The Winkeo2-C FIDO2 uses a smart card chip certified according to the Common Criteria EAL5+ standard and is certified by the French ANSSI Security Visa.

The key works with, among others, with Microsoft Entra ID, Okta, Ping Identity, Evidian, and Ilex, as well as with over 250 web services that support FIDO2 or U2F, including Gmail, PayPal, OVH, WordPress, and Dropbox.

Software Required for Operation

For basic use of the NEOWAVE Winkeo2-C FIDO2, installing dedicated software or drivers is not required.
The device operates as a USB HID.
Additional NEOWAVE driver: not required.
Dedicated NEOWAVE app for basic FIDO2 functionality: not required.
A system, browser, or app that supports FIDO2/WebAuthn or FIDO U2F is required.
When deploying in a corporate environment, the administrator must configure FIDO2 support in the appropriate IAM platform, such as Microsoft Entra ID or Okta.
NEOWAVE OTP Manager is not required for this model, as the Winkeo2-C FIDO2 is not a FIDO2 + OTP variant.

Models and Variants

NEOWAVE Winkeo2-C FIDO2
USB-C
FIDO2 CTAP 2.0
FIDO U2F
Common Criteria EAL5+
ANSSI Security Visa
Weight: 5 g

NEOWAVE Winkeo-C FIDO2
USB-C
FIDO2 CTAP 2.0
FIDO U2F
More compact design
Common Criteria EAL5+

NEOWAVE Winkeo2J-C FIDO2
Newer generation
USB-C
FIDO2 CTAP 2.1
FIDO U2F
FIDO2 Level 2
Recommended variant where the newer CTAP 2.1 features are required

NEOWAVE Winkeo2J-A FIDO2
USB-A
FIDO2 CTAP 2.1
FIDO U2F
FIDO2 Level 2
Other devices in the NEOWAVE family FIDO2
Badgeo KF FIDO2 – NFC Keychain
Badgeo Dual FIDO2 – Contactless Card and NFC
Badgeo NFC FIDO2 – Contactless NFC Card
FIDO2 + OTP Variants
FIDO2 + QSCD Variants

Personalization

The manufacturer offers optional visual personalization:
company logo
photo
user name and surname
individual number
other graphic elements depending on the project

Applications
passwordless login
FIDO2 hardware authentication
2FA
MFA
anti-phishing account protection
Microsoft Entra ID security
Okta environment security
cloud service protection
SaaS application protection
administrator account security
privileged user security
employee authentication on computers, tablets, and smartphones
replacing weaker mechanisms based on SMS, OTP, or TOTP where the platform supports FIDO2/U2F

Manufacturer and Country of Origin
Manufacturer: NEOWAVE
Brand: NEOWAVE
Model: Winkeo2-C FIDO2
Product Family: NEOWAVE FIDO2
Product Type: Hardware Security Key
Manufacturer Headquarters: Gardanne, France
Country of Origin/Manufacturing: France
The manufacturer declares for its current FIDO2 family: 100% Made in France
Label: Cybersecurity Made in Europe

Technical Specifications
Interface: USB-C HID
Connector Type: USB Type-C
Standard: FIDO2
Protocol Version: CTAP 2.0
Support: FIDO U2F
Passwordless Login: Yes
Passwordless Authentication: Yes
Passkeys in FIDO2-compliant Environments: Yes
2FA Authentication: Yes
MFA Authentication: Yes
Protection Against Phishing Protection: Yes
Credential Generation: Inside the Smart Card Component
Credential Management: Inside the Smart Card Component
Credential Storage: Inside the Smart Card Component
Smart Card Component Certification: Common Criteria EAL5+
ANSSI Security Visa: Yes
Supported Smart Card Component Algorithms: DES/3DES, AES, ECC, RSA
FIDO2 Signature Algorithm: ECC P-256
Maximum Number of FIDO2 and FIDO U2F Credentials: Up to 1024
Resident Keys: Yes
Approximate Maximum Number of Resident Credentials: Approximately 256
HMAC-secret Support: Yes
credProtect Support: Yes
Enterprise Attestation: Yes
credBlob: Yes
largeBlobKey: Yes
largeBlobs: Yes
credMgmt: Yes
authnrCfg: yes
minPinLength: yes
pinUvAuthToken: yes
setMinPINLength: yes
makeCredUvNotRqd: yes
alwaysUv: yes
User PIN: yes
PIN protocols: PIN 1 and PIN 2
PIN length: from 4 Unicode characters to 63 bytes
Maximum number of consecutive incorrect PIN attempts: 8
After 8 incorrect attempts: authenticator reset required
Default PIN: none
User presence confirmation: physical button
FIDO2 and FIDO U2F application separation: yes
Key wrapping: no
Pre-shared cryptographic key: no
Driver installation: not required
Length: 39.7 mm
Width: according to the current product page 18 mm; Technical data sheet states 17 mm
Thickness/Height: 8.25 mm
Weight: 5 g


Supported Operating Systems
Microsoft Windows
Windows 10
Windows 11
macOS
Linux
Android
iOS

Supported Browsers
Google Chrome
Microsoft Edge
Mozilla Firefox
Apple Safari

Compatible Platforms and Services
Microsoft Entra ID
Microsoft Windows 10 / 11
Microsoft 365 / Office 365 in a properly configured environment
Okta
Ping Identity
Evidian
Ilex
Gmail
PayPal
OVH
WordPress
Dropbox
Salesforce
Other applications and services compliant with FIDO2 or FIDO U2F