Product overview

The FIDO Alliance develops standards for passwordless authentication. With FIDO (Fast IDentity Online), user authentication does not rely on static passwords or one-time passwords. Instead, users are authenticated via biometrics and FIDO–compliant authenticators.

The Digipass FX7 authenticator works in connected mode via USB-C, the FX7-C model also supports NFC.

Device overview

Authenticator front

Authenticator back

PIN protection

The Digipass FX7 authenticator performs user verification by PIN. Because the Digipass FX7 authenticator has no keypad, the PIN is entered on the device to which the authenticator is connected (typically a computer or a mobile device).

After 3 consecutive incorrect PIN attempts, the authenticator must be disconnected and re-connected.

The PIN is composed of alphanumeric characters and must comply with the following rules:

• Minimum length. 4 decimal digits or 4 characters

• Maximum length. 63 bytes in UTF-8 representation. This corresponds to 63 characters if only standard ASCII characters are used, but corresponds to fewer characters if special characters are used (e.g., accented, Chinese etc.).

After a total of 8 consecutive incorrect PIN attempts, the authenticator is locked. The authenticator must be reset, which effectively removes all data (credentials, accounts, PIN) and reverts the authenticator to factory settings.

Button

The button with integrated LED is used to prove the user’s presence. When the application triggers the corresponding prompt, the user must press the button. The user even needs to press it when the application only requests touch. Bringing the FX7-C into the Near-field communication (NFC) field also proves the user’s presence, in this case the client systems will not ask the user to press a button.

LED indicator

The authenticator has one LED indicator that is integrated into the button which has the following statuses: