07-05-2025
FIDO Alliance Passkey Pledge
Token2 has signed the FIDO Alliance Passkey Pledge - a commitment to supporting and promoting passkeys for simpler, stronger sign-ins. Blog
Token2 has signed the FIDO Alliance Passkey Pledge - a commitment to supporting and promoting passkeys for simpler, stronger sign-ins. 03-03-2025
Understanding Entra’s New Time Drift Allowance
Microsoft Entra has recently updated its time drift allowances for TOTP, reducing the window to approximately 2 minutes. This change may impact users of hardware tokens that have not been used for an extended period. 29-01-2025
Beware of the Passkey Dialog: Not All Options Are FIDO2 Security Keys
When setting up a passkey on Windows, the standard authentication dialog often presents multiple options for storing credentials.09-01-2025
PIN+ Key Series Achieves FIDO Level 2 Certification
We are thrilled to announce that our PIN+ Key Series has officially obtained FIDO Level 2 (L2) Certification, a significant milestone that underscores our commitment to delivering the highest level of security for our users.03-12-2024
Automated FIDO2 Registration for Entra ID
At Token2, we work to provide organizations with easy-to-use tools. We're excited to share our new manual on FIDO2 Key Automated Registration for Entra ID.25-11-2024
Shipping to Ukraine: Our New Partnership with Nova Post
After encountering issues with other carriers, we partnered with Nova Poshta for deliveries to Ukraine. Successful test shipments now allow us to proudly offer faster, more reliable delivery with better tracking and service for our Ukrainian customers.22-11-2024
Self-Service for Hardware OATH Tokens in Entra ID with SHA256 Support
A recent update to Microsoft Entra ID now allows end-users to self-service hardware OATH tokens, removing the need for administrators to manually activate them. Admins can upload hardware tokens into a "public repository" via Graph API, allowing users to assign tokens to their accounts independently.21-11-2024
New iOS 18.1 Update Breaks Support for FIDO2.1 Final Keys
The latest iOS 18.1 release has introduced an unexpected issue affecting FIDO2.1 Final keys, rendering them incompatible with the new update. This issue is not limited to Token2's security keys but impacts devices from all manufacturers adhering to the FIDO2.1 final specification.10-09-2024
Independent Public Security Review of Token2 PIN+ FIDO2 Security Keys
Compass Security Schweiz AG (Compass), a leading Swiss IT security firm, has conducted a comprehensive and independent public security review of the Token2 PIN+ FIDO2 Security Keys firmware. 04-09-2024
Update on EUCLEAK Vulnerability and Chip Security
We want to assure you that we do not use Infineon chips, which are affected by the EUCLEAK side-channel attack recently identified by NinjaLabs. This attack exploits a vulnerability related to the extended Euclidean algorithm (EEA) used in modular inversion.24-05-2024
Reminder: Our management tools for FIDO2.1 Security Keys are Open Source!
Just a quick reminder: our FIDO2.1 Manager tool, your go-to solution for managing FIDO2 credentials securely, is fully open source! Both the Windows version, created with PowerShell, and a Linux (C++ and Python) version are available.01-05-2024
FIDO2 Security Keys. To PIN or not to PIN?
Whether to require a PIN when using a FIDO2 security key depends on various factors, including the service provider's authentication settings. This results in situations where some services always prompt for a PIN, while others never do - so we have decided to clarify these aspects.14-04-2024
Adding FIDO2 Security Keys to FINOM accounts
FINOM is a leading provider of digital banking solutions, offering innovative services to help individuals and businesses manage their finances efficiently.We're pleased to introduce a comprehensive guide on integrating FIDO2 Security Keys into your account with FINOM.
27-02-2024
Enhancing Bitwarden Security and Convenience with Passkeys
Bitwarden's latest upgrade introduces passkeys, such as FIDO2 keys and platform authenticators, enhancing both security and user convenience for vault encryption and decryption tasks with PRF capabilities.15-02-2024
Introducing Token2 PIN+ Release 2: Elevating Security with 300 Passkey Storage
We're excited to introduce Token2 PIN+ Release 2, our latest FIDO2 Key that boasts an unmatched advantage: the ability to store up to 300 passkeys (aka resident keys). This significant capacity provides unparalleled flexibility and convenience for managing your online accounts securely. 05-02-2024
FIDO2.1 Manager: Standalone Passkey Management Tool for Windows
In response to a glaring gap in the market, we are thrilled to introduce the first standalone FIDO2.1 Passkey Management Tool for Windows. Fueled by the necessity for a user-friendly solution, our tool addresses the discomfort users face with command line tools and Chromium-based methods.16-12-2023
Microsoft Authenticator Paves the Way for FIDO2 Key Integration
Microsoft has recently unveiled a groundbreaking development in user authentication, introducing a game-changing feature of Microsoft Authenticator, at least for accounts protected with FIDO2 Security Keys. 12-12-2023
Exploring Virtual TOTP Tokens Experience
We periodically get requests to provide testing units. In our usual practice, free samples aren't part of the equation. However, if you're eager to test the functionality, we've got some options that fully emulate the capabilities of our hardware tokens.17-10-2023
Automating programmable token provisioning tasks with token2-config.exe
The Token2 Configuration Tool (token2-config.exe) is a versatile and robust command-line utility specifically designed for configuring Token2 TOTP NFC Programmable tokens. 18-08-2023
Introducing the New Python-Powered TOTP tool for Token2 FIDO2 Security Keys!
Manage and use TOTP/HOTP codes via Python CLI script using a PC/SC device (USB NFC) or directly via USB. A cross-platform solution that works under Windows, macOS and Linux platforms. Python-based tools are essential not only for their cross-platform compatibility, but also because their source-available nature allows experts/developers to examine the source code, ensuring transparency and minimizing the risk of hidden vulnerabilities or malicious elements. A GUI wrapper for the script is also available.