FEITIAN BioPass FIDO2 – FIDO2 Biometric Security Key

FEITIAN BioPass FIDO2 – FIDO2 Biometric Security Key

FEITIAN BioPass FIDO2 is a series of hardware security keys that utilize fingerprint biometrics for strong user authentication. The solution combines FIDO2, WebAuthn, and FIDO U2F standards with a built-in fingerprint reader, enabling secure login to online services, applications, and corporate systems without the need for a traditional password.

The key can be used as part of MFA (Multi-Factor Authentication) and for passwordless scenarios, where user identity is confirmed using a physical key and fingerprint. FEITIAN demonstrates compatibility with WebAuthn-based services such as Microsoft, Google, and Salesforce.

The key element of BioPass FIDO2 is the built-in biometric sensor. Fingerprint data is protected by a security chip within the device. According to the manufacturer, the stored biometric data is used solely for comparison with the user's fingerprint and does not allow for the reconstruction of the original fingerprint image.

The BioPass FIDO2 is recognized as a standard Human Interface Device (HID), meaning that no special device driver is required for typical FIDO2/WebAuthn use.

The series includes the basic version, the BioPass FIDO2 Plus, and the more advanced BioPass FIDO2 Pro, which also offers PIV, HOTP/TOTP, and Windows Biometric Framework support.

Key Features

Hardware Biometric Security Key
Fingerprint Authentication
FIDO2 Support
WebAuthn Support
FIDO U2F Support
Passwordless Authentication
MFA Multi-Factor Authentication Support
Anti-phishing Protection
Man-in-the-Middle (MITM) Attack Protection
Biometric data stored and protected on the device
Built-in Secure Element / Smart Card Secure Element
USB-A or USB-C interface depending on the variant
No NFC in BioPass FIDO2 models presented by the manufacturer
No Bluetooth/BLE
Identification as a standard USB HID device
A single key can be used with multiple services and applications
Support for additional PIV features in the Plus and Pro variants
HOTP and TOTP support in the Pro versions
Windows Biometric Framework support in the Pro versions
Compact, durable design
Metal housing selected designs of the series.

Models and Variants

The current BioPass family website lists four basic configurations:

FEITIAN BioPass FIDO2 K26

USB-C connector
Fingerprint reader
FIDO2
FIDO U2F
No NFC
Bad Bluetooth
No PIV in the basic configuration
Regarding HOTP
Related to the Windows Biometric Framework.

FEITIAN BioPass FIDO2 Plus K26+

An extended version of the K26, designed for environments requiring smart card functionality.
USB-C connector
Fingerprint reader
FIDO2
FIDO U2F
PIV – Personal Identity Verification
Secure element
No NFC
Bad Bluetooth
No HOTP with standard configuration
No WBF in the standard configuration.

FEITIAN BioPass FIDO2 Pro K49 Pro

The most advanced version of the BioPass series with a USB-C connector. USB-C connector
Biometric fingerprint reader
FIDO2
FIDO U2F
HOTP
TOTP
PIV
Windows Biometric Framework – WBF
Ability to preload seeds
No NFC
Bad Bluetooth.

FEITIAN BioPass FIDO2 Pro K50 Pro

The K49 Pro's wireless functionality also includes USB-A.
złącze USB-A
biometryczny czytnik linii papilarnych
FIDO2
FIDO U2F
HOTP
TOTP
PIV
Windows Biometric Framework – WBF
możliwość preload seeds
brak NFC
bad Bluetooth.

FIDO2/CTAP

This is the różnica generacyjna pomiędzy modelami:

BioPass FIDO / BioPass FIDO Plus – producer klasyfikuje starsze implementacje w group CTAP 2.0
BioPass FIDO Pro K49 Pro / K50 Pro – current firmware is available in group CTAP 2.1.

Oprogramowanie wymagane do działania

Standardowe and FIDO2 / WebAuthn

If you normally use FIDO2/WebAuthn, you will never be able to use the program.

This means that you can use standard HID and other devices to ensure that the system is operational, and the application is made to FIDO2/WebAuthn.

Oznacza to, że po skonfigurowaniu klucza może on być używany np. Do logowania do zgodnej usługi bez pozostawiania stale działającego programu FEITIAN na komputerze.

FEITIAN SK Manager

Do zaawansowanej konfiguracji producent udostępnia FEITIAN SK Manager.

Program umożliwia między innymi:

FIDO2 configuration
ustawienie and zmianę PIN-u FIDO2
rejestrowanie odcisków palców
testowanie zapisanych odcisków
usuwanie zapisanych odcisków
zarządzanie poświadczeniami FIDO2
usuwanie zapisanych credentials
reset FIDO2
configuration and radio PIV
zarządzanie certyfikatami PIV
configuration of the polityki użycia odcisku palca dla PIV
configurację radiocji OTP w obsługujących je wariantach

Management without the FEITIAN app

Depending on the operating system, some operations can be performed without installing SK Manager.
The manufacturer indicates, among other things, the ability to use the built-in security key manager in Chrome for:
setting a PIN
managing fingerprints
managing credentials
resetting the device.

PIV

When using the PIV – Personal Identity Verification feature, the situation depends on the system and the specific scenario.

FEITIAN provides:

FEITIAN SK Manager for PIV configuration

PIV Minidriver for Windows.

The manufacturer notes that the PIV key is a plug-and-play device and the minidriver is not required in every scenario. However, the current SK Manager manual recommends installing the PIV Minidriver in Windows to use the PIV feature.

Windows Biometric Framework – Pro versions

When using the K49 Pro/K50 Pro as a biometric login device in Windows via WBF – Windows Biometric Framework, the appropriate WBF FEITIAN driver is required.

The manufacturer confirms support for:
Windows 7
Windows 8
Windows 10
Windows 11
for the specified local/on-premises Windows login scenario.