Secure access. Ready to go.

Skip the complexity. LEAF Universal is a high-security MIFARE DESFire EV3 smart card that works with Wavelynx readers out of the box. No security engineering. No custom configuration. No waiting. Every credential is guaranteed unique.

Upgrade instantly, securely.

Smart, encrypted credentials that work the moment they arrive. No security engineering required.

No Setup Required

Wavelynx handles all the security configuration. You skip the complexity and go straight to deploying smart credentials across your facility.

Plug and Play

Enroll the badge in your access control panel. Present it at the reader. Access granted. Compatible with every Wavelynx APEX and Ethos reader, and any other LEAF community member's devices.

Grow When You're Ready

Start here, upgrade anytime. Move to dedicated corporate keys (LEAF Enterprise) or the highest-security credential tier (LEAF Verified) without replacing a single reader.

Who should start with LEAF Universal?

A high-security, zero-friction smart credential built for specific deployment cases.

Distributors & Resellers

Stock a single smart credential SKU that works with any Wavelynx reader deployment. No custom key coordination needed: simply ship and go. Every credential is guaranteed unique, eliminating the complexity of tracking facility codes and card-number ranges when ordering.

New Installations

Deploying Wavelynx readers for the first time? Universal gets you onto a modern smart card platform day one, with zero security engineering prerequisites.

Evaluation & Pilots

Test Wavelynx reader compatibility and panel enrollment workflows before committing to a custom key profile. Universal is the zero-friction proving ground.

Three steps. That's it.

No key ceremonies, no database registration, no administration delays.

1

Order

Select LEAF Universal cards or key fobs. Zero setup requirements and standard lead times.

2

Enroll

Import the credential manifest (every unique ID in your order) into your physical access control software, or scan and register the cards directly.

3

Present & Go

Present the card to any Wavelynx reader. Secure, encrypted authentication happens instantly.

LEAF Verified is our flagship credential.

Public-key security at the chip level, on the same readers, with the same out-of-the-box fit and the same ordering process. LEAF Universal is the pre-configured option when the simplest path onto a smart card is what the project needs.

Want to add LEAF Universal to your stack?

Talk to an expert for next steps and for a review of your unique project needs.

Frequently Asked Questions

Is LEAF Universal actually secure if the keys are pre-configured?+

Yes. Universal uses high-security AES-128 encryption on MIFARE DESFire EV3 silicon, the same standard trusted by governments and transit networks worldwide. The pre-configured key set is securely managed by Wavelynx and is not publicly accessible. For organizations requiring exclusive key custody, LEAF Enterprise offers a custom symmetric key profile.

What readers support LEAF Universal?+

All Wavelynx APEX and Ethos readers support LEAF Universal out of the box with zero configuration. Additionally, because LEAF is an open-standard credential format, any LEAF-compatible reader from other manufacturers will read these cards when configured.

Can I upgrade from Universal to Enterprise or Verified later?+

Yes. Wavelynx APEX readers support both symmetric and asymmetric credentials, so stepping up to LEAF Verified (ready-to-deploy public key, built to resist cloning) is a card-order configuration change, not a hardware rip-and-replace. Check the device compatibility matrix for your specific hardware. And if your organization needs dedicated key custody, LEAF Enterprise key profiles are available standalone or encoded onto LEAF Verified.

Do I need to schedule a key ceremony or consult Wavelynx engineers to deploy Universal?+

No. That's the primary benefit of Universal. The credentials arrive pre-programmed and ready to go. You simply enroll the badge IDs in your access control software, present the card to the reader, and deploy.

Are LEAF Universal credentials available as dual-technology cards?+

Yes. You can order LEAF Universal cards with an embedded 125 kHz Prox coil to allow them to function on both legacy Prox readers and modern smart readers, enabling a smooth, phased migration path.

What form factors and branding options are available?+

LEAF Universal is available in ISO standard card and key fob form factors. The printable ISO cards support standard photo ID printing and full custom graphic customization using ordinary dye-sublimation or retransfer printers.

You Trust Them. They Trust Us.

Cove.is
Groove Identification Solutions
TradeID
PSA
Wesco
CIE
MyDoorView
Nedap
Hartmann Controls
Smart Spaces
RightCrowd
ELATEC
RFIDeas
SWIFTCONNECT
SPLAN
Soloinsight
SHARRY
COHESION
B-LINE
ALERT ENTERPRISE
SPECTRUM
YOURSIX
TYCO
SMARTRENT
SIELOX
SICUNET
REALPAGE
PDK
PCSC
MAXXESS
LIFTMASTER
LIBERTY
ISONAS
HONEYWELL
GENETEC
GENEA
GATEWISE
BUTTERFLYMX
DIGITAL MONITORING PRODUCTS
BRIVO
ALARM.COM
AMAG TECHNOLOGY
ACRE

Explore the full credential family.

LEAF Verified

The first ready-to-deploy public-key credential. Cryptographically resistant to cloning. Carries your MIFARE apps and custom key sets.

Learn more
LEAF Enterprise

Custom key ownership: a dedicated AES key profile exclusive to your organization. Standalone or encoded onto LEAF Verified.

Learn more
Mobile Access

Apple & Google Wallet credentials via NFC. Aliro zero-trust support coming.

Learn more
Credential Add-ons

FIDO2, UHF, Prox or magstripe on the same LEAF card.

Learn more