[{"data":1,"prerenderedAt":19},["ShallowReactive",2],{"blog-content-en-hardware-2fa-crypto-wallet":3},{"slug":4,"title":5,"excerpt":6,"description":7,"bodyHtml":8,"faqItems":9},"hardware-2fa-crypto-wallet","Hardware 2FA for Crypto: How a Tap Card Secures a Software Wallet","Software wallets are fast but live online. A physical tap card adds a hardware second factor — something you hold — on top of your biometric unlock. Here is how hardware 2FA works, and how it differs from cold storage.","Hardware 2FA for crypto explained: how a physical tap-to-authenticate card adds a second factor to a software wallet, how it layers with biometrics and non-custodial key control, and why it is not the same as cold storage.","\u003Cp>\n      Two-factor authentication is an old idea with a simple core: to prove who you are, combine\n      something you know, something you are, and something you have. Crypto wallets have been slow to\n      bring real hardware into that mix. Most software wallets lean on a password or a biometric —\n      one factor, living entirely on a phone that is itself online. A \u003Cstrong>hardware second\n      factor\u003C\u002Fstrong> changes that equation by adding something physical you must hold and tap. The\n      WATS NFC Metal Card is exactly this kind of factor, and this article explains how hardware 2FA\n      works for a wallet, what it protects against, and — just as importantly — what it does not.\n    \u003C\u002Fp>\n\n    \u003Ch2>What \"hardware 2FA\" means for a wallet\u003C\u002Fh2>\n    \u003Cp>\n      In a software wallet, the everyday unlock is usually a biometric: Face ID or a fingerprint,\n      which is the \"something you are\" factor. That is good, but it all happens on one device.\n      Hardware 2FA introduces a second, independent factor — \"something you have\" — in the form of a\n      physical object. With WATS, that object is the NFC Metal Card. To authenticate, you tap the\n      card to your phone; the wallet now has evidence of two different things at once: your biometric\n      on the device, and your physical possession of the card. An attacker has to defeat both,\n      together, rather than picking off one.\n    \u003C\u002Fp>\n\n    \u003Ch2>Why a software wallet benefits from a physical factor\u003C\u002Fh2>\n    \u003Cp>\n      The threats a software wallet faces are mostly remote and digital: phishing pages, malicious\n      approvals, a compromised app, a stolen session. A physical tap is stubbornly resistant to that\n      whole category, because \u003Cstrong>you cannot phish a tap from the other side of the\n      internet.\u003C\u002Fstrong> A scammer who tricks you into a fake site still does not have your card, and\n      cannot conjure the contactless handshake from afar. Adding a \"something you have\" factor\n      narrows the attack surface to scenarios where someone has both your unlocked device and your\n      physical card — a far higher bar than a stolen password.\n    \u003C\u002Fp>\n\n    \u003Ch2>How the WATS tap card works as a second factor\u003C\u002Fh2>\n    \u003Cp>\n      The card carries an embedded \u003Cstrong>NTAG 216\u003C\u002Fstrong> chip (NFC Forum Type 4). When you tap,\n      the phone and the card complete a short contactless handshake over\n      \u003Cstrong>ISO\u002FIEC 14443 at 13.56 MHz\u003C\u002Fstrong>, secured with \u003Cstrong>AES-128\u003C\u002Fstrong> so the\n      exchange cannot be trivially replayed by a casual eavesdropper. That handshake is the second\n      factor in action. It does two jobs: \u003Cstrong>tap-to-authenticate\u003C\u002Fstrong>, which gates access to\n      the wallet, and \u003Cstrong>tap-to-sign\u003C\u002Fstrong>, which adds a physical confirmation step to a\n      transaction you have already initiated. In the WATS \u003Ca href=\"\u002Fhot-wallet\">Hot Wallet\u003C\u002Fa>, which is\n      fully non-custodial — you hold your own keys and your own seed phrase, and WATS never holds a\n      key — this stacks on top of your biometric unlock, so you end up with biometric and physical\n      tap reinforcing one another while signing authority stays entirely yours.\n    \u003C\u002Fp>\n    \u003Cblockquote>\n      Think in layers. Biometric proves it is you on the device. The card tap proves you are\n      physically present with the companion. Non-custodial control means your keys and seed phrase\n      never leave your hands, so no one but you can settle a transaction. Each layer covers a gap the\n      others leave open.\n    \u003C\u002Fblockquote>\n\n    \u003Ch2>Hardware 2FA is not cold storage — and that is the point\u003C\u002Fh2>\n    \u003Cp>\n      This is the distinction people most often blur, so let us be blunt. A \u003Cstrong>cold wallet\n      stores your private keys offline\u003C\u002Fstrong> and signs transactions inside the device; its whole\n      job is to keep keys away from an online machine. The WATS tap card does something different: it\n      \u003Cstrong>does not store keys at all.\u003C\u002Fstrong> Your keys live in the non-custodial WATS apps. The\n      card secures \u003Cem>access and authorisation\u003C\u002Fem>, not key custody. That is not a weakness to\n      apologise for — it is a deliberate design choice with a real upside. Because the card holds\n      nothing, losing it is an inconvenience, not a catastrophe; a found card is inert metal. A\n      device that holds your keys turns loss into disaster. A second factor that holds nothing turns\n      loss into a replacement order.\n    \u003C\u002Fp>\n\n    \u003Ch2>What it protects against — and what it doesn't\u003C\u002Fh2>\n    \u003Cp>\n      Being honest about the threat model is what makes a security claim worth anything. Here is the\n      plain version.\n    \u003C\u002Fp>\n    \u003Cul>\n      \u003Cli>\n        \u003Cstrong>It helps against:\u003C\u002Fstrong> remote phishing and unauthorised access on a device,\n        because an attacker without the physical card is missing a required factor; and casual\n        transaction approval, because signing now needs a deliberate physical tap.\n      \u003C\u002Fli>\n      \u003Cli>\n        \u003Cstrong>It does not help against:\u003C\u002Fstrong> giving away your recovery phrase. The card is not\n        your seed and cannot protect a seed you have already exposed. Treat the card as a second\n        lock, never as a substitute for protecting your recovery phrase.\n      \u003C\u002Fli>\n      \u003Cli>\n        \u003Cstrong>What it is not:\u003C\u002Fstrong> we do not claim the card is a certified secure element or\n        tamper-proof key vault. It is an honestly described secured NFC authentication tag.\n        Conflating \"secured NFC tag\" with \"hardware key vault\" is the most common mistake people\n        make about cards like this.\n      \u003C\u002Fli>\n    \u003C\u002Ful>\n\n    \u003Ch2>Where to go next\u003C\u002Fh2>\n    \u003Cp>\n      For the security model in depth — the chip, durability and the card-loss scenario — read\n      \u003Ca href=\"\u002Fblog\u002Fnfc-metal-card-security\">WATS NFC Metal Card security, explained\u003C\u002Fa>. To see how\n      a hardware factor fits a broader security routine, our\n      \u003Ca href=\"\u002Fblog\u002Fcrypto-wallet-security-best-practices\">crypto wallet security best\n      practices\u003C\u002Fa> guide places it alongside seed backups, approval hygiene and phishing defence.\n      And if you are weighing a tap factor against true offline storage,\n      \u003Ca href=\"\u002Fblog\u002Fhot-wallet-vs-cold-wallet\">hot wallet vs cold wallet\u003C\u002Fa> explains where each\n      belongs.\n    \u003C\u002Fp>",[10,13,16],{"q":11,"a":12},"Is the WATS NFC card the same as a cold or hardware wallet?","No. A cold or hardware wallet stores your private keys offline and signs inside the device. The WATS card stores no keys — it is a hardware second factor that authenticates access and adds a physical tap to sign. Your keys stay in the non-custodial WATS apps.",{"q":14,"a":15},"Can a hardware second factor be phished?","Not remotely. A tap requires physical possession of the card and a real contactless handshake with your phone, so a scammer on a fake website cannot reproduce it. The card does not protect a recovery phrase you have already given away, though — it guards access, not your seed.",{"q":17,"a":18},"Does the card replace my biometric unlock?","No, it layers on top of it. Biometric unlock is \"something you are\" on the device; the card tap is \"something you have\". Using both means an attacker has to defeat two independent factors at once instead of one.",1784634270134]