K44 USB-C + Lightning PIV Security Key

The FEITIAN K44 is a FIDO2 and FIDO U2F security key with both USB-C and Lightning connectors, plus Smart Card PIV, OATH-HOTP/TOTP and OpenPGP. It is designed for teams that sign in from USB-C computers and older iPhones with a Lightning port using the same key.

Works with: Twitter, Google Accounts, Microsoft Accounts, Facebook, Salesforce, Zoho, Dropbox, DUO Security, Microsoft Azure Entra ID, Microsoft Active Directory, Coinbase, Bank of America, Okta, Ping Identity and many more websites, applications, computers, laptops and devices that accept USB Security Keys.

Interested in bulk orders? Reach out to our team at sales@ftsafe.us for volume discounts.

Features:

• The simplest, most effective way to protect your employees against account takeovers
• Delivers an intuitive user experience with the simplest security key set up, deployment, and use
• Interoperates out-of-the-box with hundreds of services that support FIDO U2F and FIDO2
• FIPS-140-2 L2 Certified + Physical Security L3 Certified #4422
• USB-C and Lightning Connector
• Slim, sleek and durable metal casing design with keychain hole
• Supported Operating Systems: Chrome OS, Windows, Linux, Mac OS
• Maximum number of credentials: No Limit
• Communication Protocol: HID
• FIDO: AES, ECDSA, SHA256
• Smart Card (PIV): RSA 1024, RSA 2048, ECC P256, ECC P384
• OpenPGP: RSA 1024, RSA 2048
• OATH-HOTP, OATH-TOTP
• Static Password
• Challenge Response
• Dimensions: 43mm x 13mm x 5.5mm
• Weight: 4.5 grams
• Warranty: 1-year warranty
• Manual

What is PIV?

• PIV Related Resources

A Personal Identity Verification (PIV) credential is a US Federal governmentwide credential used to access Federally controlled facilities and information systems at the appropriate security level.

PIV credentials have certificates and key pairs, pin numbers, biometrics like fingerprints and pictures, and other unique identifiers. When put together into a PIV credential, it provides the capability to implement multi-factor authentication for networks, applications, and buildings.

This is the process of creating and using a government-wide secure and reliable form of identification for federal employees and contractors, in support of HSPD-12, Policy for a Common Identification Standard for Federal Employees and Contractors.

Source: https://csrc.nist.gov/Projects/piv

Compatibility and use cases

• Connectors: USB-C and Lightning in a slim metal casing with a keychain hole. Supported OS: Chrome OS, Windows, Linux and Mac OS.
• Cloud and workforce sign-in: Microsoft Azure Entra ID, Microsoft Active Directory, Microsoft Accounts, Google Accounts, Okta, Ping Identity and DUO Security, plus hundreds of other FIDO2 and FIDO U2F services.
• PIV smart card credentials: RSA 1024, RSA 2048, ECC P256 and ECC P384 for access to federally controlled systems and privileged environments.
• Legacy systems: OATH-HOTP, OATH-TOTP, static password and challenge response, plus OpenPGP (RSA 1024, RSA 2048).

Frequently Asked Questions

Does the K44 work with Microsoft Entra ID, Okta and Google?

Yes. FEITIAN lists Microsoft Azure Entra ID, Microsoft Active Directory, Okta, Ping Identity, DUO Security and Google Accounts among the services the K44 works with. It interoperates out-of-the-box with hundreds of services that support FIDO U2F and FIDO2.

Does the K44 work with iPhone?

The K44 has a Lightning connector for older iPhones with a Lightning port and a USB-C connector for USB-C devices. If your users need to tap a key on NFC-enabled phones instead, the K40+ offers USB-C and NFC with the same PIV, OATH and OpenPGP support.

How many credentials can the K44 store?

FEITIAN lists the K44's maximum number of credentials as No Limit. A FIDO2 key can also register with an unlimited number of services that use non-resident credentials.

Do I need two K44 keys?

Yes. Register at least two keys per person from day one: one for daily use and one stored safely as a backup. If a key is lost, you sign in with the backup key and remove the lost key from your account, so you never need a weaker fallback method.

What is the difference between the K44 and the K40+?

Both keys support FIDO2, FIDO U2F, Smart Card PIV, OATH-HOTP/TOTP and OpenPGP. The K44 plugs in through USB-C or Lightning, while the K40+ uses USB-C and NFC and stores 44 resident credentials. Pick by the ports and phones your users have.

Further reading: which security key protects against account takeovers, best FIDO security keys for MFA, and all USB-C FIDO security keys.