blog

PIN+ Key Series Achieves FIDO Level 2 Certification

09-01-2025

We are thrilled to announce that our PIN+ Key Series has officially obtained FIDO Level 2 (L2) Certification, a significant milestone that underscores our commitment to delivering the highest level of security for our users.


The FIDO Alliance's Security Certification Program ensures that authentication devices meet stringent security standards and includes several levels, with the first two being as follows:

  • FIDO Level 1 (L1): This certification guarantees adherence to FIDO's foundational security principles. Products with L1 certification meet basic security requirements and are suitable for consumer-grade use, where the risk of advanced attacks is minimal.
  • FIDO Level 2 (L2): Taking security to the next level, L2 certification mandates resistance against physical attacks such as tampering or side-channel exploits.



The following table provides a side-by-side comparison of the key differences between FIDO Level 1 (L1) and FIDO Level 2 (L2) certifications.

Feature FIDO Level 1 (L1) FIDO Level 2 (L2)
Security Focus Basic protection for consumer-grade use cases. Advanced protection against physical and side-channel attacks.
Technology Requirements No specialized hardware requirements. Requires a Secure Element (SE) or equivalent certified hardware.
Use Case Suitable for applications with minimal risk of advanced attacks. Ideal for high-security environments such as enterprise, financial, and government applications.
Testing Requirements Basic compliance with FIDO security guidelines. Rigorous testing for tamper-resistance and key protection.



Dual Certification: FIDO2 and U2F L2

We are proud to share that the PIN+ Key Series is certified not only as a FIDO2 L2 Level authenticator but also as a U2F L2 Level authenticator. This dual certification highlights the comprehensive security measures embedded in our devices, making them versatile and secure for both modern and legacy authentication protocols.

  • FIDO2 Level 2 Certification:
  • U2F Level 2 Certification:


Current Landscape of L2-Certified Authenticators in the Market

According to the FIDO Metadata Service (MDS), as of January 2025, there are currently only 148 FIDO Certified FIDO2 authenticators available worldwide, reflecting the stringent standards required to achieve certification. Out of these, only 8 companies have successfully obtained Level 2 certification, with Token2 proudly becoming the latest to join this group. To make exploring the MDS database more accessible, we’ve also developed a FIDO MDS Database Tool that offers an easier-to-use interface for navigating and understanding the database.



What This Means for PIN+ Key Users

Achieving FIDO L2 Certification for our PIN+ Key Series demonstrates that these devices are equipped to withstand sophisticated attacks, making them ideal for high-security environments. Whether you're securing enterprise accounts, accessing government systems, or protecting sensitive financial data, the PIN+ Keys offer peace of mind with industry-leading protection. Our commitment to security and innovation drives us to continuously enhance the capabilities of our products. With FIDO L2 Certification, the PIN+ Key Series now stands among the most robust authentication solutions available today. In addition, it is worth noting that Compass Security, a leading Swiss IT security firm, conducted a comprehensive and independent public security review of the Token2 PIN+ FIDO2 Security Keys firmware, which is fully open source.



Looking Ahead

We remain dedicated to providing cutting-edge authentication solutions that meet the evolving needs of our users. The FIDO Level 2 certification is just one of many milestones as we work toward creating a safer, more secure digital world.

product updates


Did you know?

Token2 is offering currently the most secure FIDO2 keys for enterprise customers, known as the PIN+ Series FIDO2 keys. These keys, certified by the FIDO alliance, enforce PIN complexity at the firmware level. This unique feature is not available with other keys, even those marked as FIPS-certified.