ATKey FIDO2 PIN Complexity Policy

PIN complexity enforces common PIN rules on the FIDO2 PIN of your ATKey. A PIN must have at least 6 characters, cannot be a simple pattern such as a repeated or sequential run, and cannot be one of the commonly used PINs listed below. Blocking these PINs reduces the risk of someone guessing the PIN.

PIN complexity is supported on ATKey keys with firmware that includes this feature. It is off by default and is turned on by the platform or management tool that configures the key.

When PIN complexity is enabled

  • It applies when you set or change the FIDO2 PIN of the key.

  • It does not affect an existing PIN. The rules are checked the next time the PIN is set or changed.

  • It stays on until the key is reset. A reset also deletes all credentials and the PIN.

  • A new PIN that breaks the rules is rejected, and the rejection does not use up a PIN retry. Entering the wrong current PIN still counts as a retry.

Unicode characters

Each Unicode character counts as one character. A PIN must be at least 6 characters and at most 63 bytes (UTF-8). PINs with non-ASCII characters are allowed.

Blocked PINs

PINs are blocked, that is, cannot be used, if they:

  • Have fewer than 6 characters.

  • Use too few different characters: fewer than 3 different characters, or for longer PINs fewer than half of the characters being different. Examples: 111111, aaabbb, Mississippi1.

  • Are made mostly of one character, where a single character makes up more than half of the PIN. Example: 2222as.

  • Are a straight sequence of digits only or letters only, going up or down by the same step. Examples: 123456, 654321, acegik.

  • Repeat a shorter pattern. Examples: 123123, abcabc, a1b2a1b2.

  • Are on the list of commonly used PINs below (not case-sensitive):

BLOCK List

0987654321 112233 123321 1234567890 12345678910 123654 123abc 147258 159357 159753 168168 1q2w3e4r 1q2w3e4r5t 1qaz2wsx 258369 271828 314159 357159 5201314 520520 abc123 admin123 asdfgh baseball batman computer dragon football freedom harley hello123 hunter iloveyou jordan23 letmein master michael monkey password password1 password123 princess qazwsx qwerty qwerty123 qwertyuiop samsung secret shadow starwars summer sunshine superman test123 trustno1 unknown welcome whatever winter zaq12wsx zxcvbn