Replace the Windows
password tile.

CodeB Credential Provider V2 is Windows logon software that replaces the Microsoft password tile using the documented Credential Provider Filter interface. Users sign in with NFC cards, TOTP, PKI smartcards or USB tokens, either as a second factor or fully passwordless. It is 100% managed .NET with no kernel drivers and is built by Aloaha Limited, a Malta-based European vendor.

CodeB Credential Provider V2 supports Windows 8, 8.1, 10 and 11 (x86 and x64) and Windows Server 2012 R2 through Windows Server 2025. The System Tray and Tools editions work with local accounts, Active Directory and Entra ID; the Admin CLI covers local accounts and Active Directory.

CodeB Credential Provider V2 supports NFC cards (Mifare DESFire, Mifare Classic, NTAG), TOTP codes per RFC 6238 from any authenticator app, PKI smartcards (PIV, PKCS#11, CSP) and USB tokens (CCID, vendor SDKs). These can be combined as multi-factor logon or used for pure passwordless logon.

Yes. CodeB Credential Provider V2 can run either as a second factor on top of the Windows password or as full passwordless logon, whichever your security model requires. Regulated offices can replace password rotation with smartcard-issued credentials.

All editions use the same Credential Provider V2 underneath; they differ in how the helper tools are packaged. The System Tray Edition bundles all helpers in one tray application and is the only edition with card-remove actions (auto-lock or sign-out). The Tools Edition ships each helper as a standalone, scriptable executable. The CodeB Admin CLI is a command-line utility for unattended, CSV-driven enrolment of cards to users.

You need the System Tray Edition. Card-remove auto-lock or sign-out is only available in the System Tray Edition and is not included in the Tools Edition. This is the typical setup for shared clinical workstations, where pulling the card locks the PC before the next clinician arrives.

No. CodeB Credential Provider V2 needs no cloud connection and supports air-gapped machines. The product page states there is no telemetry, no analytics and no call-home, and it runs identically on a workstation that has never been connected to the internet.

The page describes CodeB Credential Provider V2 as FIPS 140-2 enforceable by Group Policy, in all three editions. It is also described as NIS2-aligned through operator-driven hardening, uses the documented Microsoft Credential Provider Filter API, and ships signed installers whose binaries can be verified on disk.

The CodeB Credential Provider V2 installers are free downloads, and licences are sold per seat or as site licences on the Aloaha store at www.codeb.io/pricing.html. Volume discounts apply above 100 seats. Full evaluation keys are shipped within 24 hours on request.

Use the CodeB Admin CLI, which performs the same enrolment actions as the GUI helpers unattended: linking an NFC card to an AD user, storing encrypted credentials, auditing assignments and revoking cards. Enrolment is CSV-driven and can run from batch scripts, PowerShell pipelines or SCCM tasks.

Yes. Setting the registry value HKLM\SOFTWARE\WOW6432Node\CodeB\Config\HideSystray hides the System Tray icon, and it can be distributed via Group Policy. The helper keeps running, including card-remove actions, but ordinary users cannot see or misconfigure it.

CodeB Credential Provider V2 is aimed at regulated industries: healthcare with shared clinical workstations, manufacturing with air-gapped shop floors, legal, finance and public-sector offices, and embedded, kiosk or industrial PCs. For kiosks, the Tools Edition keeps the deployment image minimal and the Admin CLI scripts enrolment.

Download the System Tray Edition (codeb_tray.zip) or the Tools Edition (codeb_smartloginhelper.zip) from the product page, then request an evaluation key via the contact form at contact.html. Evaluation keys and setup guidance ship within 24 hours, and you can also email info@aloaha.com with an RFP or deployment details.