Skip to main content

Biometric Smart Card

Your Badge Holds the Key. Your Fingerprint Turns It.

TokenCore™ Card | Biometric smart card authentication

TokenCore™ Card brings FIDO2 passwordless authentication, on-device fingerprint verification, and Bluetooth plus NFC into the card your people already know how to carry.

It delivers phishing-resistant authentication above the IAM, SSO, and PAM infrastructure you already run. Nothing to replace. No credential to steal.

Contact Sales

Why TokenCore™

  • Ready on Day-1

    Works with your existing SSO

  • Fast Set-up

    Less than 90 seconds to set-up new users

  • Ultra fast sign-in

    Sign-in, with no password in less than 2 seconds

  • Humans + AI

    Biometric authentication for humans and AI agents

  • 100% Acceptance

    Full user acceptance, wireless device, with nothing to plug-in

  • Endless Versatility

    More than a dozen form factors, to fit every employee need

  • Works with all Devices

    Seamless with Windows, Mac, Linux, iOS and Android

  • Gold Standard

    The true gold standard in identity

Smart Card Authentication

It Goes Where the Badge Already Goes.

Smart card authentication, verified by fingerprint

TokenCore™ Card is a FIDO2-certified biometric smart card. The fingerprint is matched on the card, the credential is stored in tamper-resistant hardware, and authentication runs over Bluetooth 5.4 or NFC.

No passwords. No one-time codes. No push notifications to approve. Smart card MFA that proves the human, not just the card.

card-wide
badge-wide
wallet-wide
lanyard-wide
phone-wide
card-wide
badge-wide
wallet-wide
lanyard-wide
phone-wide

Protection

Built to Stop Real Attacks

Attackers don't break in anymore. They log in. Every credential that can be typed, approved, or copied can be used by someone else.

TokenCore™ Card protects against:

  • Credential theft
  • Phishing
  • Replay attacks
  • Man-in-the-middle attacks
  • Password compromise
  • Push fatigue attacks

Identity is proven by fingerprint, not by a password. No fingerprint, no access.

Built to Stop Real Attacks
TokenCoreTM Card_ Phishing-Resistant MFA

The Hardware

TokenCore™ Card: Phishing-Resistant MFA

TokenCore™ Card is FIDO2 phishing-resistant MFA hardware that will not authenticate without the fingerprint of the authorized user.

Presence over Bluetooth. Identity by fingerprint. Proof by cryptography. Access is granted only when the right person is there.

How It Works

No Fingerprint, No Access

How TokenCore™ Card authentication works

Three checks happen in the time it takes to touch the sensor. Each one must pass. There is no fallback.

card-step-01-mobile

Presence Detected

Bluetooth checks whether the authorized user is physically present. Present or not.

card-step-02-mobile

Identity Verified

The fingerprint is matched locally, inside the EAL6+ secure element. Nothing is sent to the cloud.

card-step-03-mobile

Cryptography Executed

The FIDO2 credential is signed inside the secure element. The credential never leaves the card.

 

TokenCore™ Card

FIDO2 • Biometric • Passwordless

Contact Sales
Card-transparent

Specifications

Everything Inside, Nothing Exposed

TokenCore™ Card technical specifications

TokenCore™ Card is a biometric smart card in the same shape as the badge your people already carry, so there is nothing new to learn. Passwordless authentication deploys above the identity stack you run today, and your IAM, SSO, and PAM stay where they are. From office staff to privileged administrators, every user is held to one standard of proof.

  • FIDO2 Certified
  • EAL6+ secure element
  • Device-bound biometrics
  • Bluetooth 5.4
  • NFC authentication
  • Proximity-based access
  • OTA firmware updates
  • Enterprise platform compatibility
  • Co-brandable design
  • Standards: FIDO2 / WebAuthn / U2F
  • Passwordless authentication
  • Phishing-resistant MFA
  • Public key cryptography
  • Hardware-backed authentication
  • Device-bound credentials
  • Bluetooth 5.4
  • NFC authentication
  • Wireless authentication
  • Proximity-based login
  • No USB connection

Operating systems: Windows, macOS, Android, iOS.

Enterprise platforms: Microsoft Entra, Okta, Google Workspace, Ping Identity, CyberArk, and any FIDO2/WebAuthn-compatible IAM, SSO, or PAM platform.

  • Phishing-resistant authentication
  • Credential theft protection
  • Replay attack protection
  • Man-in-the-middle protection
  • Credentials never leave the secure element
  • Passwordless login
  • Credit card form factor
  • ISO/IEC 7810 ID-1 dimensions
  • Neutral gray finish
  • Front fingerprint sensor
  • Customer branding on reverse
  • Engraved serial number
  • FIDO2 Certified
  • EAL6+ secure element
  • FIPS 201-3 PIV compatible
  • WebAuthn compliant
  • U2F compatible
  • Product setup assistance
  • Enterprise onboarding
  • Firmware update support
  • Technical troubleshooting

Integrations

Works with Your Favorite Apps & Systems

TokenCore™ Card works alongside any FIDO2/WebAuthn identity platform, with seamless interoperability across the systems your teams sign in to every day. No drivers. No middleware. No infrastructure replacement.

entra-wide
okta-logo-white
google-logo-white
Ping-Logo-2-white
cyberark-logo-white
entra-wide
okta-logo-white
google-logo-white
Ping-Logo-2-white
cyberark-logo-white

Setup

From Box to Login in Five Steps

How to set up TokenCore™ Card

Enroll once. Every login after that is a single touch.

Download the App

Step 1

Download the App

Install the Token app from the App Store or Google Play.

Enroll your fingerprint

Step 2

Enroll Your Fingerprint

Your fingerprint is enrolled to the card and stays on the card.

Add a Security Key

Step 3

Add a Security Key

Register TokenCore™ Card as a security key with your identity provider.

Pair the Card

Step 4

Pair the Card

Complete pairing in your operating system.

Sign In

Step 5

Sign In

Authenticate with your fingerprint. No password, no code, no push.

The comparison

Move Beyond Legacy MFA

Why TokenCore™ Card beats traditional authentication

Legacy MFA verifies a code. Passkeys verify a device, and can be synced to another one. USB security keys verify possession, so whoever holds the key holds the access.

TokenCore™ Card verifies the human. The fingerprint is enforced, the credential is device-bound inside an EAL6+ secure element, and it authenticates over Bluetooth or NFC from a familiar card. It fits the badge and wallet workflows your people already follow, and it carries your brand, not ours.

Capability Verifies the human
Legacy MFA No
Passkeys Partial
USB Key No
TokenCore™ Card Yes
Capability Phishing resistant
Legacy MFA No
Passkeys Yes
USB Key Yes
TokenCore™ Card Yes
Capability Enforced biometric verification
Legacy MFA No
Passkeys Partial
USB Key Partial
TokenCore™ Card Yes
Capability No PIN fallback
Legacy MFA No
Passkeys No
USB Key No
TokenCore™ Card Yes
Capability Device-bound credentials
Legacy MFA No
Passkeys Partial
USB Key Yes
TokenCore™ Card Yes
Capability EAL6+ secure element
Legacy MFA No
Passkeys No
USB Key Varies
TokenCore™ Card Yes
Capability Bluetooth + NFC authentication
Legacy MFA No
Passkeys Partial
USB Key Partial
TokenCore™ Card Yes
Capability Familiar card form factor
Legacy MFA No
Passkeys No
USB Key No
TokenCore™ Card Yes
Capability Fits badge and wallet workflows
Legacy MFA No
Passkeys No
USB Key No
TokenCore™ Card Yes
Capability Co-brandable for enterprise
Legacy MFA No
Passkeys No
USB Key Varies
TokenCore™ Card Yes

Enterprise

Roll It Out Under Your Own Brand.

Ordering TokenCore™ Card for enterprise

TokenCore™ Card is ordered, branded, and deployed for the size of your workforce.

Volume Purchasing

Pricing built for enterprise quantities.

Get Volume Pricing

Co-Branding

Your brand on the reverse of every card.

Deployment Assistance

Pilot to full rollout, alongside the identity stack you already run.

Technical Onboarding

Your IAM team is set up before the first user enrolls.

OTA Firmware Updates

Deployed cards gain new capability in the field instead of being replaced.

Get in Touch

Tell us how many people need to be proven. We'll handle the rest.

Contact Sales

Get Started

Make Identity Absolute

Give every person in your organization a card that proves who they are. Deploy TokenCore™ Card without changing your identity infrastructure.

Contact Sales