Winkeo2J-A FIDO2 + OTP

Neowave Winkeo2J-A FIDO2 + OTP – USB-A Security Key with FIDO2, FIDO U2F, and OTP for maximum authentication flexibility

Many enterprise environments rely on both modern FIDO2 standards and existing OTP-based systems. The NEOWAVE Winkeo2J-A FIDO2 + OTP elegantly resolves this dilemma: It combines FIDO2 (CTAP 2.1), FIDO U2F, and OTP (HOTP/TOTP) in a single compact USB-A Security Key—featuring an EAL6+-certified smart card and FIDO L1 Certification.

Three protocols, one device

The Winkeo2J-A FIDO2 + OTP is the ideal solution for organizations that require both FIDO2-based Passwordless authentication and time-based or event-based one-time passwords. TOTP (Time-based One-Time Password) with a validity period of 30 or 60 seconds, as well as HOTP (HMAC-based One-Time Password) with a configurable seed and 6 to 8 digits, are fully supported. SHA-1, SHA-256, and SHA-512 are available as hash algorithms. The free NEOWAVE OTP Manager app, which can be downloaded from the NEOWAVE website, is required to use OTP.

EAL6+ Smart Card and FIDO Level 1 Certification

At the heart of the key is an integrated micro-SIM smart card (ISO 7816, Java Card™) certified to Common Criteria EAL6+ —the highest recognized security level for smart card components. In addition, the device is FIDO L1 certified. The Private Key never leaves the device, making the authentication process immune to phishing, credential theft, and replay attacks.

FIDO2 CTAP 2.1 – State-of-the-art protocol features

The FIDO2 component supports the latest CTAP 2.1 specification, including enhanced PIN management (Protocols 1 and 2), Enterprise Attestation, credBlob, largeBlobs, and specific PIN policies. Passwordless Authentication works natively with Windows 10/11 and Microsoft Entra ID. FIDO U2F can be used to secure over 250 online services—such as Gmail, PayPal, Dropbox, OVH, and WordPress—as well as identity federation solutions (Evidian, OKTA, Ping Identity).

Wide compatibility and optional customization

Supported operating systems: Windows, macOS, Linux. Browsers: Chrome, Edge, Firefox, Safari. Developed and manufactured in Europe, the key bears the “Cybersecurity Made in Europe” label. Optional customization with a logo, photo, name, or serial number is available. Dimensions: 43.8 × 18 × 9.76 mm, 6 g.

Who is the Winkeo2J-A FIDO2 + OTP suitable for?

Companies and government agencies that need to support both modern FIDO2 infrastructures and legacy OTP systems, and want to rely on a single, highly secure device—without compromising on security certification.