Best FIDO2 Security Key Cards by Service

Which Cryptnox FIDO2 card page should I use for my account?

Use this hub to choose the Cryptnox FIDO2 card route for your service: most listed services use security keys as 2FA, while Google and Microsoft Entra ID / Microsoft work or school accounts are listed as both 2FA and passwordless. The Cryptnox card is a contact and NFC smart card, so you can tap it to a phone or insert it into a reader. Choose the service first, then follow the matching setup route.

NO SOFTWARE INSTALLATION REQUIRED FOR FIDO2 SECURITY KEY CARD

Buy from the Official CRYPTNOX Store

Shop
Payment methods accepted in the Cryptnox store
Fulfilled by logistics Worldwide shipping. Fast delivery from within CH, EU and US – no import duties. Shipping & delivery

Prefer Amazon?

CRYPTNOX products are also available worldwide through our official Amazon stores.

Available on Amazon

Faster FIDO2 sign-in on Windows: Click-to-Tap

When a service asks you to “tap your security key”, press the Click-to-Tap virtual button on the reader instead of pulling the card out and reinserting it. The card stays in the slot and the sign-in finishes in seconds.

The virtual button works on Windows with Cryptnox FIDO2 cards. On macOS and Linux the same reader operates as a standard PC/SC contact reader for any ISO 7816 card.

Cryptnox dual-card hardware wallet set: primary smart card, red backup card and PIN PUK access card
Collection of FIDO2 security keys

Choose the right service route

Upgrade your online security with the Cryptnox FIDO2 Key

This hub is the service index for Cryptnox FIDO2 security key card pages. Start with the account you want to protect, then choose the child page that matches that account. The route label beside each service matters because most listed services use security keys as a second factor, while Google and Microsoft Entra ID / Microsoft work or school accounts are listed as both 2FA and passwordless.

If you are learning the general startup flow before choosing a service, keep the Cryptnox FIDO2 card startup guide open while you review the service route list. If you want to return to the full service index later, use the Cryptnox FIDO2 security key cards hub.

How to use this index

  • Choose the account provider first.
  • Use the route label to see whether the service page is for 2FA only or for both 2FA and passwordless.
  • Open the service-specific page instead of following a generic security-key article.
  • Use the startup guide for the general Cryptnox FIDO2 card flow after you choose the service.

The Cryptnox card is a contact and NFC smart card. You can tap it to a phone, or insert it into a reader. That dual-interface format is separate from the service route: the route is determined by the account provider listed below.

Phone showing the Cryptnox app start screen beside a Cryptnox FIDO2 smart card

Services where security keys are used as 2FA

The services in this group are listed as security keys as 2FA. Use the child page that matches the account you want to protect.

For exchange-account comparisons inside this cluster, the Binance – security keys as 2FA page and the bitfinex – security keys as 2FA page are direct service routes to review.

Download on the App StoreGet it on Google Play

Services where security keys can be both 2FA and passwordless

Two child pages in this index are listed as both 2FA and passwordless. Use these pages when the account you want to protect is Google or Microsoft Entra ID / Microsoft work or school accounts.

What “both” means in this index

“Both” means the service-specific Cryptnox page is the route for security keys as a second factor and as a passwordless route. It is not the same label as the 2FA-only group. Keep Google and Microsoft Entra ID / Microsoft work or school accounts separate from the services listed as 2FA only.

If you manage several account types, start with the service that controls the sign-in you need to protect first. Use the Google page for Google. Use the Microsoft Entra ID / Microsoft work or school accounts page for that Microsoft route. Use the previous section for Bank of America, login.gov, ID.me, Coinbase, bitfinex, Binance, Dropbox, Shopify, nordvpn, GoDaddy, cloudflare, or Fastmail.

Cryptnox card format for service sign-in

The Cryptnox card uses a contact and NFC smart-card form factor. You can tap the card to a phone, or insert it into a reader. That detail helps when choosing the right service page because the same card presentation model can sit behind different account routes.

Phone and reader use

  • On a phone, the card is presented by tapping it through NFC.
  • With a reader, the card is inserted for contact use.
  • The account route still comes from the service page: 2FA only, or both 2FA and passwordless where listed.

The card itself has no biometric sensor. Unlock in the Cryptnox app uses the phone’s biometric unlock, so the phone handles that unlock step and the card remains a smart card.

The free Cryptnox app is available on iOS and Android. For crypto wallet use, the app connects to Web3 through WalletConnect and works with MetaMask. If you are comparing the wallet product as well as the FIDO2 service index, review the Cryptnox Crypto Hardware Wallet – Dual-Card Set product page before buying.

Dual-Card Set security model

The Cryptnox Crypto Hardware Wallet – Dual-Card Set ships uninitialised. During setup, the seed is generated inside both secure elements, so the second card is the backup. There is no recovery phrase to write down by default.

Private keys are generated inside the secure element and never leave it. The card uses an EAL6+-certified chip. That certification applies to the chip platform, not to the finished card as a whole.

Why the second card matters

The backup model is part of the buyer decision for the Dual-Card Set. Instead of starting with one card and a default phrase-writing step, the set is initialised so the seed is generated inside both secure elements. The second card is therefore the backup card for the set.

  • The set starts uninitialised.
  • The seed is generated inside both secure elements during setup.
  • The second card is the backup.
  • Private keys are generated inside the secure element and never leave it.
  • The chip platform is an EAL6+-certified chip.

Importing a 12/24-word BIP39 seed is an advanced option, not the default setup route. The cards are Swiss-engineered and made in Switzerland.

Buyer path through the hub

Use the hub in a simple order: identify the account, confirm the route label, then move to the matching child page. The index is built for buyers who already know the service they need to protect and want the correct Cryptnox page without reading a long generic article first.

Service-first buying path

  • If the account is Bank of America, login.gov, ID.me, Coinbase, bitfinex, Binance, Dropbox, Shopify, nordvpn, GoDaddy, cloudflare, or Fastmail, use the 2FA group.
  • If the account is Microsoft Entra ID / Microsoft work or school accounts or Google, use the group marked as both 2FA and passwordless.
  • If you need the general card startup flow, use the FIDO2 card startup guide after choosing the service page.
  • If you are ready to compare the wallet set before purchase, review the Cryptnox Crypto Hardware Wallet – Dual-Card Set.

For service pages close to this hub, the Bank of America – security keys as 2FA page and the Fastmail – security keys as 2FA page show two different 2FA account contexts inside the same Cryptnox FIDO2 card cluster.

Every service covered, and what a security key does there

Each page below covers one service, what its own documentation supports, and how to enrol a card. Most services treat a security key as a second factor rather than a password replacement.

Keep service routes and wallet setup separate

The service index tells you where to go for Bank of America, login.gov, Microsoft Entra ID / Microsoft work or school accounts, Google, ID.me, Coinbase, bitfinex, Binance, Dropbox, Shopify, nordvpn, GoDaddy, cloudflare, and Fastmail. The wallet product page tells you how the Dual-Card Set handles secure-element key generation, backup, and app use.

That separation matters for a buyer because an account-service route and a crypto wallet setup are not the same decision. The service route answers which child page to use for sign-in protection. The wallet setup answers how the uninitialised Dual-Card Set creates the seed inside both secure elements and uses the second card as the backup.

Use the right page for the decision

  • Use the service child pages to choose between 2FA-only routes and the two routes marked as both 2FA and passwordless.
  • Use the best FIDO2 security key cards hub whenever you need to return to the complete service index.
  • Use the startup guide for the general Cryptnox FIDO2 card setup flow.
  • Use the shop page when the buying decision is the Cryptnox Crypto Hardware Wallet – Dual-Card Set.

After you choose the service route, keep the matching child page and the startup guide together. When the buying decision is the dual-card wallet set, use the shop product page so you are reviewing the product being sold.

Frequently asked questions

Is this hub for one service or for many services?

This hub is for many Cryptnox FIDO2 card service pages. It links to the listed child pages and labels each route. Most listed services are marked as security keys as 2FA, while Google and Microsoft Entra ID / Microsoft work or school accounts are marked as both 2FA and passwordless.

Which listed services use security keys as 2FA?

Bank of America, login.gov, ID.me, Coinbase, bitfinex, Binance, Dropbox, Shopify, nordvpn, GoDaddy, cloudflare, and Fastmail are listed here as security keys as 2FA. Use the matching child page for the account you want to protect.

Which listed services are marked as both 2FA and passwordless?

Microsoft Entra ID / Microsoft work or school accounts and Google are listed as security keys as both. In this hub, that label means the service page covers security keys as a second factor and as a passwordless route.

How do I present the Cryptnox card to a device?

The Cryptnox card is a contact and NFC smart card. You can tap it to a phone, or insert it into a reader. The service route is still chosen by account provider, not by only one physical presentation method.

Does the card itself have a biometric sensor?

No. The card itself has no biometric sensor. Unlock in the Cryptnox app uses the phone’s biometric unlock, so the phone handles that step while the Cryptnox card remains a smart card.

How does backup work in the Dual-Card Set?

The Dual-Card Set ships uninitialised. During setup, the seed is generated inside both secure elements, so the second card is the backup. There is no recovery phrase to write down by default. Importing a 12/24-word BIP39 seed is an advanced option.

What protects private keys on the Cryptnox wallet set?

Private keys are generated inside the secure element and never leave it. The card uses an EAL6+-certified chip, and that certification applies to the chip platform. The cards are Swiss-engineered and made in Switzerland.

Does Cryptnox ship worldwide, and will I pay import duties?

Yes. Cryptnox ships worldwide from the official CRYPTNOX store. Orders to Switzerland, the European Union and the United States are dispatched from stock already held in each of those regions, so the parcel does not cross a customs border into your country and there are no import duties to pay. Orders to other destinations are shipped internationally, and any import duties or local taxes are set by the destination country and are the recipient’s responsibility. Current shipping rates are shown at checkout.