One credential. A whole ecosystem of devices.
LEAF credentials aren't locked to Wavelynx readers. This is the live reference of which readers, wireless locks, modules, and third-party devices read each LEAF credential type (physical and digital) across the access control ecosystem.
Four ways to carry a LEAF identity.
Every device below is mapped against these four credential types. Pick the security model that fits, and check which devices already read it.
Wavelynx NFC Wallet
A DESFire-based NFC wallet platform offered through many PACS and PIAMs, with support for Apple, Google, and Samsung Wallet.
LEAF Universal
Off-the-shelf MIFARE DESFire EV3 credentials bringing LEAF interoperability to the SMB market. Ships with a credential manifest for easy enrollment.
LEAF Enterprise
MIFARE DESFire EV3 credentials custom-programmed to the LEAF Identity spec, using unique keysets managed via Wavelynx key management services.
LEAF Verified
Certificate-based public-key security built on NXP MIFARE DUOX. Designed for scale, open to everyone, and ready for zero trust. Ships with a credential manifest.
Device compatibility matrix
Search a device or manufacturer, or filter by credential type and device category. A check means the device reads that LEAF credential.
| Device | Category | Wavelynx NFC Wallet |
LEAF Universal |
LEAF Enterprise |
LEAF Verified |
|---|
No devices match your filters.
AES-256 Device reads LEAF Verified using AES-256 keying, as noted in the source document.
Apple only Wallet support on this device is limited to Apple Wallet.
* Requires SIM cards loaded with secure keys provided by Wavelynx for LEAF and Wallet functionality.
Some devices may need to be ordered preconfigured. Contact sales to confirm your exact configuration.
Source: Wavelynx Credential Solutions · Last updated May 11, 2026.
Bridge the old world and the new.
These technologies can be layered onto Wavelynx physical credentials to support legacy infrastructure and logical access during a transition.
FIDO2
An open standard for phishing-resistant, passwordless login using public-key cryptography, replacing passwords with secure, local authentication for multi-factor scenarios.
Available with LEAF Enterprise credentials.
Prox (Legacy)
Add 125 kHz Prox functionality to your card for continued support on legacy readers while you move to modern, secure credential technology.
Available with LEAF Verified, Enterprise, and Universal.
Magstripe (Legacy)
A blank magstripe to support legacy installations transitioning to modern, secure technology.
Available with LEAF Verified and Enterprise.
Don't see your device?
The LEAF ecosystem is growing. If the reader, lock, or device you need isn't listed yet, talk to our team: new integrations are added regularly, and many devices can be ordered preconfigured.
Explore the full credential family.
Pre-configured symmetric smart credentials. Any LEAF-compatible reader, no key setup.
Learn moreCustom key ownership: a dedicated AES key profile exclusive to your organization. Standalone or encoded onto LEAF Verified.
Learn moreThe first turnkey public-key credential. Unclonable by design. Carries your MIFARE apps and custom key sets.
Learn moreApple & Google Wallet credentials via NFC. Aliro zero-trust support coming.
Learn more