1 7

Buy FIDO2 Security USB Key - Passwordless MFA Security Key

Token BioStick (USB uniquement)

Token BioStick (USB uniquement)

$89.00 USD
$89.00 USD
Promotion Épuisé
Frais d'expédition calculés à l'étape de paiement.

Token BioStick est un authentificateur biométrique, sans mot de passe et certifié FIDO, qui protège contre le vol d'identifiants et la compromission de comptes. Il protège les entreprises en protégeant leurs applications métier critiques et leurs utilisateurs privilégiés, tout en offrant aux consommateurs un moyen sécurisé de protéger leurs comptes personnels grâce à une authentification anti-hameçonnage.

Caractéristiques principales

  • Certifié FIDO2 L1
  • Élément sécurisé inviolable
  • Biométrie liée à l'appareil
  • Technologie évolutive
  • Fonctionnalité USB sécurisée
  • Accès basé sur la proximité
  • Largement compatible

Points forts

  • Sécurisé : Authentification biométrique, sans mot de passe, certifiée FIDO et résistante au phishing. L'élément sécurisé inviolable certifié EAL5+ protège tous les identifiants numériques. Aucune connexion Wi-Fi ni cellulaire n'est requise, et le micrologiciel évolutif garantit la prise en charge permanente de votre technologie.
  • Pratique : authentification biométrique transparente ; offrant une expérience de connexion sécurisée mais pratique via USB pour les ordinateurs portables, les ordinateurs de bureau et les appareils mobiles.
  • Polyvalence : Les protocoles FIDO2/WebAuthn et U2F sont pris en charge par la plupart des principaux gestionnaires d'accès et d'identité, ainsi que par des centaines de services de comptes professionnels et personnels. Ils sont compatibles avec les systèmes d'exploitation et navigateurs les plus répandus, notamment Windows, macOS, Chrome et Edge. Pour consulter la liste complète des services compatibles, rendez-vous sur https://www.tokenring.com/fr-ca/intégrations.
  • Fiabilité : Conception de qualité, résistante aux éclaboussures et à la poussière. Aucune connexion Wi-Fi ni cellulaire n'est requise, pour une authentification fiable et sans interruption de service.

Installation facile

  • Téléchargez l'application Token pour une configuration rapide et l'enregistrement des empreintes digitales (disponible pour Windows, MacOS, Android et iOS)
  • Connectez-vous au service que vous souhaitez sécuriser
  • Accédez aux paramètres de sécurité du compte et recherchez l'option permettant d'ajouter une authentification multifacteur avec une clé de sécurité
  • Suivez les instructions à l'écran en fonction de votre système d'exploitation

Remarque : pour les commandes de 20 appareils ou plus, veuillez contacter directement le service commercial ici : https://www.tokenring.com/fr-ca/contacter-ventes 

Afficher tous les détails

Key Features

  • FIDO2 Certified

    Meets the highest phishing-resistant authentication standard. No credential exists to steal. No shared secret exists to intercept.

  • Tamper-Resistant Secure Element

    Private keys are generated on-device and never exported. EAL5+ certified hardware protection at the storage level.

  • Device-Bound Biometrics

    Your fingerprint unlocks access locally. Identity is bound to you. Not a device. Not a code. Not a delegated session.

  • Upgradeable Technology

    Signed over-the-air firmware updates extend capabilities and close emerging gaps. No hardware replacement required.

  • Proximity-Based Access

    Physical presence is required at every access event. Remote relay attacks are structurally impossible.

  • Plug and Authenticate

    USB-powered. No battery. No charging cycles. Always ready.

  • Widely Compatible

    Works with any platform supporting FIDO2/WebAuthn, including Okta, Entra, Google Workspace, and CyberArk.

  • No Charging Required

    Draws power from the host device. Zero maintenance. Zero downtime from a dead battery.

How to Set Up TokenCore™ Portable

Setup takes minutes.

  • Step 1: Download the Token App

    Available for Windows, macOS, Android, and iOS. Use it to enroll your fingerprint and configure the device.

  • Step 2: Log in to the service you want to protect

    Sign in to your account as normal.

  • Step 3: Navigate to Account Security Settings

    Find the option to add a security key or multifactor authentication method.

  • Step 4: Follow the on-screen prompts

    Your operating system will guide you through the pairing process. TokenCore™ Portable handles the rest.
Download on the App StoreGet it on Google Play

TokenCore™ Portable: Technical Specifications

Core Security & Authentication

  • Standards Compliance: FIDO2/WebAuthn + U2F
  • Authentication Type: Passwordless, phishing-resistant MFA
  • Cryptography: Public key cryptography. No shared secrets
  • Security Model: Hardware-based authenticator with isolated key storage
  • Secure Element: EAL5+ certified

Connectivity & Interface

  • Primary Interface: USB (plug-and-authenticate)
  • Form Factor: Compact, pocket-sized security key
  • Power Source: USB-powered. No battery required.

Device Compatibility

  • Operating Systems: Windows, macOS, iOS, Android
  • Enterprise Platforms: Google Workspace, Microsoft Entra, Okta, CyberArk, Ping Identity
  • Works with any FIDO2/WebAuthn-compliant platform
  • No drivers. No middleware.

Security Protections

  • Phishing-resistant by cryptographic domain binding
  • Eliminates: credential theft, replay attacks, man-in-the-middle attacks, OTP vulnerabilities, push-based MFA bypasses
  • No passwords stored or transmitted
  • Credential generated on-device. Never exported.

Hardware & Build

  • Biometric Sensor: 508 DPI fingerprint sensor
  • Credential Storage: On-device, hardware-isolated
  • User Presence: Required. Physical interaction enforced at every access event
  • Portability: Compact. Keychain-friendly. Designed for everyday carry

Certifications & Compliance

  • FIDO2 certified
  • SOC 2 compliant
  • NIST SP 800-171 aligned
  • Supports CMMC Level 2 requirements
  • FINRA-compliant proximity verification

Technical Support

Setup and technical support is included with every order. Our team is available to assist with enrollment, deployment, and enterprise configuration. Contact Support.

Meet TokenCore™ Portable

Hardware Built for Uncompromising Identity

TokenCore™ Portable connects via USB. Plug in, touch the sensor, authenticate.

No codes. No prompts. No delay.

Inside: an EAL5+ certified secure element, a 508 DPI fingerprint sensor, and FIDO2/WebAuthn compliance. Private keys are generated on-device and never exported. Physical interaction is required at every access event.

No fallback. No PIN override. No exception.

Up and Running in Minutes

Download the Token App.

Enroll your fingerprint. Takes under two minutes.

Plug in, touch, authenticate. Authentication completes in two seconds from that point forward.

No IT deployment project. No driver installation. No credential provisioning.

Download the Token App

Built for Everyday Carry

TokenCore™ Portable is compact enough for a keychain, a laptop bag, or a lanyard.

No charging cycles. No battery to manage. No maintenance.

It draws power from the host device. Ready when you are.

Portable vs. Portable+

Which Is Right for You?

Both models deliver the same biometric standard, EAL5+ secure element, FIDO2 certification, and uncompromising identity enforcement. The difference is connectivity.

TokenCore™ Portable TokenCore™ Portable+
USB ✓ ✓
Bluetooth (BLE 5.3) — ✓
NFC — ✓
Biometric Sensor 508 DPI 508 DPI
Secure Element EAL5+ EAL5+
FIDO2 / WebAuthn ✓ ✓
No Battery Required ✓ ✓
Built for: Fixed workstation environments where a direct USB connection is always available. Mobile-first and mixed environments where wireless access and physical proximity enforcement are required.

How It Works

  • 1. Presence Detected

    Plug TokenCore™ Portable into your device. Presence is confirmed immediately. No session begins without physical contact.

  • 2. Identity Verified

    Touch the fingerprint sensor. Your biometric is matched on-device in real time. No PIN. No fallback. No exception.

  • 3. Cryptography Executed

    A domain-bound credential is generated and signed using elliptic curve cryptography. Authentication completes. No credential is transmitted. None exists to steal.
Learn More

Works with Your Existing Stack

TokenCore™ Portable is not a replacement.

It sits above your existing IAM, SSO, and PAM, completing the identity layer at the point where failure carries the highest consequence.

Works natively with:

  • Google Workspace
  • Microsoft Entra (Azure AD)
  • Okta
  • CyberArk
  • Ping Identity
  • Any FIDO2/WebAuthn-compliant platform

No rip-and-replace. No credential migration. No new infrastructure.

Built to Stop Real Attacks

Phishing Is Eliminated

Phishing works by redirecting authentication to a lookalike domain.

TokenCore™ Portable binds authentication cryptographically to the verified destination. A lookalike domain fails the domain check. The credential is never generated.

There is no credential to intercept. There is no fallback to exploit.

Replay Attacks Have No Surface

Traditional credentials can be captured and reused.

TokenCore™ Portable generates a unique, domain-bound credential at every authentication event. A captured response cannot be replayed.

The math changes every time. The attack surface disappears.

OTP and Push MFA Are No Longer Enough

One-time codes can be intercepted. Push notifications can be approved under pressure.

TokenCore™ Portable requires a biometrically verified, physically present individual. Every single time.

No code to intercept. No prompt to approve. No session to hijack.

Why TokenCore™ Portable Beats Every Other Method

  • vs. Passwords

    Passwords are shared secrets. They are guessed, leaked, phished, and sold.

    TokenCore™ Portable has no password. There is no shared secret. There is nothing to steal.

  • vs. Authenticator Apps & OTP Codes

    Codes are intercepted in transit. Authenticator apps verify a device, not a person.

    TokenCore™ Portable verifies the individual: biometrically, in real time, at every access event.

  • vs. Push Notifications

    Push MFA is approved by a human making a judgment call under conditions they cannot always verify.

    TokenCore™ Portable requires physical presence and fingerprint confirmation. There is no prompt to approve under pressure.

  • vs. Standard Security Keys

    A standard security key proves device possession. It does not prove the person holding it.

    TokenCore™ Portable requires both: device possession and verified biometric identity. Without both, nothing happens.

  • vs. Passkeys

    Passkeys can be synced. A synced credential can be shared.

    TokenCore™ Portable credentials are hardware-bound and non-transferable. They cannot be synced, shared, or delegated.

Ordering for Enterprise?

TokenCore™ Portable is deployable at scale.

For orders of 20 or more, contact our enterprise sales team for volume pricing, dedicated onboarding support, and deployment guidance.

Every order includes:

  • Free shipping
  • Easy returns
  • Technical support
  • Setup documentation

Identity infrastructure should not come with buyer's risk. It doesn't here.

Contact Sales