PATENTED CLICK-TO-TAP TECHNOLOGY

CAC & Smart Card Reader — Patented Click-to-Tap for FIDO2 on Windows

One press. Signed in. When a website asks you to touch your security key, the patented Click-to-Tap button confirms user presence for your Cryptnox FIDO2 card — without ever taking the card out of the reader.

Choose Your Cryptnox Reader

Two readers cover the desktop smart-card workflows. Take the contact reader for FIDO2 sign-in, Windows smart-card logon and government ID cards; take the contactless reader for NFC cards and building-access credentials. Both connect over USB-C and include a plug-on USB-A adapter.

Cryptnox Click-to-Tap USB-C contact smart card reader, with the virtual tap button highlighted

1.Cryptnox Click-to-Tap USB-C Smart Card Reader

Contact · ISO 7816 · Click-to-Tap

A premium USB-C contact reader with the patented Click-to-Tap button for FIDO2 user presence on Windows. Full-size card slot plus a separate SIM-format ID-000 slot.

Primary use: FIDO2 sign-in on Windows desktops, PIV, CAC and eID cards

Cryptnox NFC USB-C contactless smart card reader with the included plug-on USB-A adapter

2.Cryptnox NFC USB-C Contactless Smart Card Reader

Contactless · ISO 14443 · MIFARE DESFire

A USB-C contactless reader for NFC smart cards: Cryptnox FIDO2 and hardware wallet cards, MIFARE DESFire access credentials and other ISO 14443 cards.

Primary use: NFC cards and physical-access credentials

The contactless reader is not a smart-card logon reader: PIV and CAC PIN verification requires the contact interface.

Buy from the Official CRYPTNOX Store

Shop
Payment methods accepted in the Cryptnox store
Fulfilled by logistics Worldwide shipping. Fast delivery from within CH, EU and US – no import duties. Shipping & delivery

Prefer Amazon?

CRYPTNOX products are also available worldwide through our official Amazon stores.

Available on Amazon

Why FIDO2 Sign-In on a Desktop Needs a Better Reader

Every FIDO2 / WebAuthn sign-in requires a user-presence check — proof that a human, and not software running in the background, approved the login. A USB security key has a metal touch button for exactly this. A smart card sitting in an ordinary contact reader has nothing to touch.

Without Click-to-Tap

Ordinary contact reader

An ordinary contact reader has no button. The only way to signal user presence is to physically pull the card out of the slot and push it back in — for every single sign-in.

It is slow, it wears out the card and the connector, and the card is out of the reader exactly when you are trying to work.

With Click-to-Tap

Cryptnox Click-to-Tap reader

One press of the button drives the smart-card interface through a controlled extraction-and-reinsertion sequence at the protocol level — with no mechanical movement of the card.

The host sees a fresh tap, the card never leaves the slot, and nothing wears out. It is the contactless "tap" gesture, on a contact-mode card.

Windows asking to tap your security key, answered by pressing the Cryptnox Click-to-Tap button while the card stays in the reader
On Windows the sign-in prompt asks you to tap your security key. One press of the Click-to-Tap button answers it — the card never leaves the slot.

Click-to-Tap requires Cryptnox FIDO2 smart cards and works on Windows. With other cards or other operating systems the reader continues to work as a standard CCID / PC-SC contact reader. See the Click-to-Tap virtual button tutorial.

Built for the Cards You Already Carry

FIDO2 / WebAuthn Sign-In

Click-to-Tap · Windows

Phishing-resistant multi-factor and two-factor sign-in for Microsoft 365, Microsoft Entra ID, Google Workspace and other WebAuthn services — and passwordless sign-in where the service supports it. Click-to-Tap confirms user presence with one press.

Windows Smart-Card Logon

PIV · NIST SP 800-73-4

Certificate-based logon to Windows and Active Directory, VPN access, digital signatures and document encryption, using a PIV card and certificates issued by your own certificate authority.

Government & Enterprise Cards

CAC · PIV · eID · OpenPGP

Reads US DoD CAC and PIV cards, European national eID cards, OpenPGP and corporate PKI cards over the contact interface, with the official middleware each card requires.

CAC Reader for US DoD Common Access Cards

The same contact reader that carries the Click-to-Tap button is a standard CAC reader. It reads US DoD Common Access Cards, US government PIV cards, European national eID cards, OpenPGP and corporate PKI cards — anything presenting an ISO 7816 contact interface.

What a CAC actually needs

A Common Access Card is a contact ISO 7816 smart card. Reading it needs a contact reader — a contactless reader cannot be used for CAC sign-in, because the PIN has to be verified over the contact interface.

The Cryptnox Click-to-Tap reader is a standard USB CCID / PC-SC device, so it is driven by the smart-card stack already built into Windows, macOS and Linux. No vendor driver is installed.

What the reader does not provide

The reader moves messages between the card and your computer. It holds no keys, has no secure element and performs no signing of its own.

You still need the certificates and middleware your organisation mandates — the reader does not supply them, and no reader can. The same applies to PIV cards and to European national eID cards, each of which has its own official software.

Which national cards are readable, and the middleware each country requires, is documented in Smart Card Reader Compatibility by Country.

Patented Click-to-Tap Technology

Cryptnox-engineered Swiss firmware

Click-to-Tap is a Cryptnox invention layered on top of the standard USB CCID interface. Pressing the button drives the smart-card interface through a controlled extraction-and-reinsertion sequence at the protocol level — with no mechanical movement of the card — giving a contact-mode FIDO2 card the same user experience as a contactless tap, eliminating wear on the card and connector and enabling rapid re-authentication.

  • Registered Austrian utility model — GM55114/2025
  • Registered German utility model — No. 202025108028.1
  • United States patent application pending — No. 19/534.472
  • The Click-to-Tap button logic is the Cryptnox contribution, developed in Switzerland; the underlying CCID reader hardware is a commodity component.

Cryptnox patented technology · Click-to-Tap reader factsheet (PDF)

Technical Specifications

Click-to-Tap
  • One press confirms the FIDO2 user-presence check without removing the card.
  • Drives a controlled extraction-and-reinsertion sequence at the protocol level; no mechanical movement of the card.
  • Requires Cryptnox FIDO2 smart cards and works on Windows.
  • Protected by registered Austrian and German utility models, with a United States patent application pending.
Interface & connection
  • Native USB-C, with a plug-on USB-A adapter included; USB 2.0.
  • Standard USB CCID / PC-SC device — uses the in-box Microsoft CCID driver, no driver installation.
  • Works as a standard reader on Windows, macOS, Linux and ChromeOS.
Card slots
  • Full-size slot for standard ID-1 / CR80 smart cards.
  • A separate SIM-format ID-000 slot for developer and embedded-security work.
  • One card is active at a time.
Cards supported
  • Cryptnox FIDO2 smart cards and Cryptnox hardware wallet cards.
  • US DoD CAC and US government PIV cards.
  • European national eID cards — the official middleware for each country is required.
  • OpenPGP / GnuPG cards, corporate PKI cards, and EMV chip cards for testing and development.
Standards
  • ISO/IEC 7816 contact interface; PC/SC 2.0; USB CCID.
  • Extended APDU supported.
Contactless reader
  • ISO/IEC 14443 Type A and B at 13.56 MHz.
  • MIFARE DESFire access credentials and Cryptnox contact & NFC cards over their NFC interface.
  • Native USB-C with a plug-on USB-A adapter; USB 2.0; extended APDU supported.
What the readers do not do
  • These are pass-through readers: no secure element, no key storage, and no signing in the reader itself.
  • No Cryptnox reader has a PIN pad — the PIN is entered on the host.
  • All cryptographic and identity operations happen on the inserted card, with its middleware and host software.
Warranty & compliance

Also for eID, Professional and Wallet Cards

National eID and professional cards

The contact reader reads European national eID and professional cards — the Belgian eID, the Czech eObčanka, the Estonian ID-kaart, digital tachograph driver cards and others — each with the official middleware its issuer requires.

Which card works with which reader, and the middleware each one needs, is documented country by country in Smart Card Reader Compatibility by Country.

Cryptnox hardware wallet cards

Both readers work with Cryptnox hardware wallet cards on the desktop. The card is a contact and NFC smart card: keys are generated and held on the card's secure element, and the reader only passes messages through.

Cryptnox hardware wallet · FIDO2, PIV & MIFARE smart cards · Card reader tutorials

Frequently Asked Questions

Why does my FIDO2 card ask me to remove it and put it back in?

Every FIDO2 / WebAuthn sign-in needs a user-presence check — proof that a person approved the login. A USB security key has a touch button for this. A smart card in an ordinary contact reader has no button, so the only gesture left is removing the card and reinserting it. The Cryptnox Click-to-Tap button replaces that gesture with a single press.

What is Click-to-Tap?

Click-to-Tap is a button on the Cryptnox contact reader that electronically simulates card extraction and reinsertion. Pressing it drives the smart-card interface through a controlled extraction-and-reinsertion sequence at the protocol level, with no mechanical movement of the card, so the card can stay in the slot. It is protected by registered Austrian and German utility models, with a United States patent application pending.

Do I need a reader to use a FIDO2 card on Windows?

Yes, on a desktop PC. Most desktops have no NFC antenna, so a contact reader is how the card connects. The Cryptnox Click-to-Tap reader adds the user-presence button that a contact reader otherwise lacks.

Does Click-to-Tap work with any FIDO2 security key?

No. Click-to-Tap requires Cryptnox FIDO2 smart cards. With any other card the device still works as a standard CCID / PC-SC contact reader — you simply do not get the tap simulation.

Which operating systems support Click-to-Tap?

Click-to-Tap works on Windows. The readers themselves are standard USB CCID devices and work on Windows, macOS, Linux and ChromeOS for ordinary smart-card use.

Do I need extra software to use this as a CAC reader?

Yes, but not for the reader itself — it is a standard USB CCID device driven by the smart-card stack already in Windows, macOS and Linux, with no vendor driver to install. What you do need is the certificates and middleware your organisation mandates for its cards. No reader can supply those.

Can I use this reader with a CAC or PIV card?

Yes. The contact reader reads US DoD CAC cards, US government PIV cards, European eID cards, OpenPGP cards and corporate PKI cards, with the middleware each card requires.

Can the contactless reader do smart-card logon?

No. PIN verification for PIV and CAC cards requires the contact interface, so smart-card logon needs the contact reader. The contactless reader is for NFC cards, MIFARE DESFire access credentials and Cryptnox contact & NFC cards over NFC.

Which national eID cards work with the reader?

That depends on the country and its middleware. Every card we have checked is listed, country by country, in Smart Card Reader Compatibility by Country.