I got my metal credit card from Gemini.com a few days ago (see also). The back of the card says “Security Key Powered by Arculus”. Looks like Arculus has a lot of payment/hardware MFA/fintech/crypto offerings.
I’ve got cards from other banks that can be used as MFA, but only for the bank itself. As far as I can tell, Gemini makes no mention of any MFA functionality on their cards anywhere on their website. I loaded up the VivoKey NFC passkey manager app, set a PIN, and to my surprise was able to successfully enroll the card as a passkey on webauthn.io and several other sites.
Dug through my wallet and pile o’ cards and this is the only one I have that seems to have this functionality. Has anyone else run into this in the wild?
AAGUID appears to be zerod out. Not sure if this is true, or due to using the bridge app. Will try on a desktop shortly. I’m also curious if I can interact with the FIDO applet over a contact PCSC reader, or only contactless over NFC…