AUTHENTICATE. ENCRYPT. PROTECT. ANYWHERE.

KeyVault™

A portable hardware wallet that secures credentials, encryption keys, and qualified e-signatures - trusted by enterprises that require uncompromising security.

Crayonic KeyVault™ keeps your credentials, certificates, and secrets safe inside an EAL4+ secure element. Supporting FIDO2, PIV, and X.509 standards, it enables seamless passwordless authentication and trusted e-signing across Windows, macOS, iOS, Android, and Linux - no drivers or setup required.

Whether protecting privileged accounts or signing critical documents, KeyVault gives you complete control over your digital identity - anywhere, anytime.

Biometric
Passwordless
Autentificatiion

Encryption
&
E-Signing

Physical
Access
MFA

NFC
USB
Bluetooth Low Energy

KeyVault™

Identity & Secure Data Access

Crayonic KeyVault™ is a digital identity wallet that protects online and offline transactions. It securely stores biometric templates, cryptographic keys, and FIDO2 credentials, giving users full control over their digital identity.

Key Features

Offline Multi-Factor Authentication Made in EU

Combining secure PIN entry with biometric authentication, KeyVault™ achieves the highest multifactor security standards. It features a Common Criteria EAL4+ certified secure store and secure display, ensuring robust protection for sensitive information.

On-Device Security


All biometric processing and PIN verification occur directly on the device within a secure environment. No external systems or internet connectivity are required, ensuring maximum independence and data protection at all times.

Native Support for All Operating Systems and Cloud

The Crayonic KeyVault™ supports all major credential standards: FIDO2 Passkeys, FIDO U2F, PIV, X509, TOTP, HOTP and more on Windows, MacOS, Android, iOS, Linux. No need for extra SW/drivers.

KeyVault™

Management Features

Configuration & Manageability

Crayonic KeyVault™ devices can be easily configured and managed with compatible device and credential management systems, via Crayonic Agent end-point service.

Mobile application for Android and iOS is currently in development.

Updates & Management

Crayonic KeyVault™ supports secure firmware updates for maximum flexibility and long-term reliability and monitoring with enterprise management tools.

KeyVault™

Universal Integration

Integration Options

Crayonic KeyVault™ supports all Single Sign-on services and operating systems compatible with FIDO2 Passkeys and X509 certificates with PIV protocol.

For companies lacking SSO service, Crayonic offers an optimized Single Sign-On Gateway for quick cloud or on-prem integration.

KeyVault™

Technical Resources

For detailed technical documentation, specifications, and integration guides for Crayonic KeyVault™, please visit our dedicated technical portal:


👉 crayonic.io

This page is designed for IT professionals, developers, and system integrators who want to understand how Crayonic’s security solutions work in depth.

FAQ