AmbiSecure BioKey product hero
A short product hero loop showing the AmbiSecure BioKey biometric USB security key.
A five-second loop of the BioKey hardware in use — the on-card capacitive fingerprint sensor performing local user verification before a FIDO2 ceremony. Self-hosted MP4 (879 KB) with preload="none" so the page costs nothing until you press play. The video is muted by default and loops indefinitely; pair it with the BioKey product page for the full spec, certification posture, supported authenticators, and the form factors we ship in.
Which products does this cover?
Related engineering writing
Need a pilot, datasheet, or technical conversation?
Tell us the form factor, target deployment, and certification needs. Our engineering team will follow up directly.
Frequently asked questions
What is the AmbiSecure BioKey?
A USB security key with an on-device fingerprint sensor, so user verification happens on the authenticator itself rather than through a PIN typed on the host.
Where is the fingerprint stored?
In the secure element on the key. Matching happens on the device and the template never leaves it, so there is no central biometric database to breach.
What does the biometric replace?
The PIN, not the cryptographic key. It is the user-verification step that unlocks the credential; the private key itself never leaves the secure element either way.
What happens if the sensor fails to read?
The key falls back to PIN verification, which is why a PIN is still enrolled during setup. A biometric that cannot be read must never mean an account that cannot be reached.
Does the fingerprint work across different computers?
Yes. Verification is performed by the key, so it behaves identically on any host without drivers, enrolment, or per-machine setup.