PIN+ Mini-A Release3.4 FIDO2, U2F, PGP, PIV and TOTP Security Key with PIN complexity

The PIN+ MiniA is a miniature FIDO2 security key with a USB Type-A port, featuring advanced PIN complexity at the firmware level. Its stainless steel casing makes it compact enough to remain plugged in at all times, yet robust and convenient to carry thanks to the integrated keyring hole. This device runs Release 3.4 of our firmware.

What's New in Release 3.4

Release 3.4 builds on the functionality introduced in Release 3.3 and adds the following:

• PIV applet: smart card logon, certificate-based authentication, document signing and encryption, compliant with NIST SP 800-73-5 and supporting RSA2048, RSA3072 and RSA4096 keys.
• Advanced OTP Security: OTP profiles can be protected with a password, with a security lockout after 100 failed attempts and a 5-minute authenticated OTP session.
• FIDO2 enhancements: up to 300 passkeys, FIDO2 management via USB on iOS, and always_uv enabled by default.
• Optimized Stability: added high-voltage protection for docking stations and improved compatibility with certain hosts.
• OpenPGP applet: continues to support RSA2048/3072/4096, secp256r1, secp256k1, secp384r1, secp521r1, ed25519 and x25519, with User Interaction Flags (UIF) and KDF, and better integration with OpenPGP software.

FIDO Security Keys

FIDO security keys are compact USB devices that enable secure login to websites and applications supporting FIDO2 WebAuthn and classic FIDO (U2F) standards. With Release 3.4 of our PIN+ Series, you can store up to 300 passkeys (also known as resident keys or discoverable credentials) on a single device.

The PIN+ MiniA combines hardware-based authentication, public-key cryptography, TOTP/HOTP, U2F, FIDO2, PIV and OpenPGP to safeguard your accounts. This device delivers the highest level of multifactor authentication for user accounts with platforms such as Microsoft Entra ID, Google, GitHub, Dropbox, Salesforce, Duo, and hundreds of other HOTP, U2F, and FIDO2 compatible services. No additional tools or applications are required; simply insert the security key into a USB Type-A port and authenticate with a simple touch. The security key does not require a battery or network connectivity – it is always on and ready.

TOTP Feature

This security key can securely store the secrets for your TOTP profiles but requires a companion app (available for Android, iPhone, Windows, and cross-platform via a Python tool for Linux, macOS, and similar systems) to generate OTPs. With Release 3.4, OTP profiles can additionally be protected with a password; after authenticating, OTPs can be generated for 5 minutes before the password is required again.

PIV and OpenPGP

The PIV and OpenPGP applets are enabled by default and are accessed over CCID. While either applet is enabled, the key's LED may stay lit constantly – this is normal CCID behaviour and does not indicate a fault. Either applet can be disabled with the management tools if not needed.