Frequently Asked Questions
Find answers about AirKey and its core platform, features, and overall functionality.
General
AirKey is an authentication and identity verification solution. By embedding a custom applet onto the chip of a credit or debit card, AirKey turns the card into a one-tap hardware authenticator.
AirKey leverages the Near Field Communication (NFC) capabilities built into smartphones. When the cardholder taps their AirKey-enabled card to their phone it transmits a unique cryptogram, which is verified by the card issuer to prove possession of the card in real time.
If an AirKey-enabled card is lost or stolen, the customer follows their bank’s standard procedure to cancel the card. Once deactivated, the AirKey applet is disabled and cannot be used.
Yes, because AirKey operates via a dedicated applet that is independent of the EMV payment framework. Deployment can follow natural card replacement cycles (expired, lost, or stolen cards) without requiring a costly and disruptive mass reissuance. Standard bank turnover typically reaches over 30% card adoption in the first year, 50% in the second, and 70% by the third.*
No, a dedicated AirKey app is not required. AirKey integrates directly into your existing mobile app via a lightweight SDK. AirKey can also be used in non-app use cases via mobile web authentication.
Product
AirKey powers a range of critical authentication and identity verification interactions. The most common use cases today include new card activation, verifying high-risk transactions, mobile app enrollment and login, digital wallet provisioning, and money movement.
Yes. AirKey serves as a hardware-based possession factor (something you have) in 2FA and MFA workflows. It can complement traditional authentication solutions like SMS OTP and biometrics to create a stronger, more comprehensive security posture.
Acting as a physical hardware key, AirKey is inherently phishing-resistant. The tap of a card against a smartphone cannot be remotely replicated or scaled by AI bots. Additionally, each tap triggers a cryptographic data handshake that generates a dynamic, one-time identifier. As a result, no static personal data is left behind for attackers to steal. Because the applet is bound directly to the card during personalization, AI malware cannot scrape, export, or clone it.
Yes, AirKey operates globally over local cellular networks or WiFi. Unlike SMS OTPs, which often suffer from carrier drops and routing delays, AirKey combines dynamic Near Field Communication (NFC) technology and streamlined messaging frameworks for a more reliable experience.
**iOS users must have access to the AirKey App Clip in their connected app store.
AirKey can be embedded into any personalized credit, debit, or commercial payment card. Because AirKey requires identity binding during card personalization, it is not supported on anonymous gift cards or off-the-shelf prepaid cards.
* All content, documentation, tools, and materials available on this website are provided for general informational and educational purposes only. Nothing on this site constitutes professional legal, financial, or technical advice, or indicates the suitability of AirKey’s service for your unique circumstances. Your use of any information or materials on this website is entirely at your own risk. The performance data, case studies, and metrics displayed on this site reflect historical outcomes achieved under specific operating conditions. They do not constitute a promise or legal guarantee of future performance, return on investment, or feature efficacy. Actual outcomes of your AirKey deployment will depend heavily on factors outside our control, including your technical infrastructure, data quality, user adoption, market conditions, and third-party integrations. AIRKEY AND ITS AFFILIATES ACCEPT NO LIABILITY FOR THE USE OF THE INFORMATION CONTAINED IN, OR SUPPLIED WITH, THIS WEBSITE, EITHER BY THE INTENDED RECIPIENT OR BY ANY OTHER PERSON OR ENTITY. AIRKEY AND ITS AFFILIATES SHALL NOT BE LIABLE FOR ANY DAMAGES, FEES, COSTS, OR EXPENSES SUFFERED OR INCURRED BY THE INTENDED RECIPIENT, OR BY ANY OTHER PERSON OR ENTITY, IN RELIANCE ON THE INFORMATION PRESENTED ON THIS WEBSITE. ANY RELIANCE TO THE CONTRARY SHALL BE CONSIDERED UNREASONABLE AND UNFORESEEABLE.