TokenCore

TokenCore builds wearable and portable hardware devices, a lanyard-clippable Node, a wearable ring, and USB-C portable sticks, that use onboard fingerprint sensors and FIDO2/WebAuthn to authenticate users. Its central pitch is that passkeys and most passwordless methods prove possession of a device, while TokenCore’s biometric hardware proves the identity of the specific person holding it, with fingerprint data stored locally on the device rather than shared with a server or cloud identity provider.

The devices add domain-bound credentials to prevent spoofed login pages and a Bluetooth proximity requirement limiting authentication to within a few feet of the paired system, targeting privileged users and administrators first before broader employee rollout. TokenCore markets specifically to financial services, healthcare, aerospace and defense, critical infrastructure, and manufacturing customers, citing that a large majority of recent ransomware attacks have been identity-based.

Hardware biometric MFA addressing identity-based attacks is a sound, evidence-aligned premise, but as a young hardware company entering a market where passkeys and platform authenticators are becoming the default, TokenCore’s traction and independent validation are still limited.