Token BioStick User Guide

Introduction

Congratulations on choosing the strongest MFA with the greatest user convenience. Token BioSticks provide protection against phishing and social engineering, malware attacks including ransomware, and data breaches.

What's in the Box?

The package includes:

• Token BioStick
• USB-C to USB-A Adapter
• Quick Start Guide

Your Token BioStick

There are two models in the BioStick Series: BioStick Plus and BioStick (USB only).

Key components:

• Capacitive touch bezel [touch bezel]
• Fingerprint sensor [fingerprint sensor]
• NFC and Bluetooth interface (BioStick Plus only) [NFC/Bluetooth interface]
• Status Indicator LED [status LED]
• USB-C connector [USB-C connector]
• Secure Element [Secure Element]

Getting Started

Token BioStick Plus

To begin setup of your BioStick Plus, the battery must be charged. Plug the device into any USB-C power source or use the included USB-C to USB-A adapter.

Token BioStick

The BioStick does not have a battery. Power and authentication are achieved through the USB-C connection to your device. Refer to page 8 for setup guidance.

Locate your PIN

The PIN number is located on the product box and inside the packaging. It can also be derived from the serial number engraved on the BioStick (e.g., A119Z00759).

Charging the BioStick Plus

When the BioStick Plus is plugged into a charging port, a rainbow pattern will display on the LEDs indicating charging will begin. During charging, the LEDs will pulse with the battery status color. When the LEDs turn solid green, the charge is full, and you may continue with first-time setup. The BioStick Plus fully charges in about 2 hours.

LED Battery Status:

• G Battery is high
• Y Battery is okay
• R Battery is low

Download the Token App or Utility

Once the BioStick Plus is fully charged and displays solid green LEDs, you are ready to begin setup and fingerprint enrollment. BioStick users may begin as soon as the device is plugged in.

Using your mobile device, download the Token Ring app or scan the QR code below for Android and iOS.

Mac users: Download the Token Desktop Utility from the Mac App Store. See page 10 for more details.

The Token Apps provide simple, step-by-step guides for setup and use of your Token Biostick. For fingerprint enrollment tips and access to video tutorials, please see the next page.

Fingerprint Registration Tips & Setup Video

For optimal fingerprint registration, avoid applying excess pressure to the sensor during scans. Think 'touches' not pressing a button.

It is best to perform fingerprint registration when both your finger and the sensor are clean, dry, and not overly cold. If your hands are subject to damage due to hobbies, try selecting a finger for scanning that is less likely to be damaged.

Watch the Setup Tutorial

Visit tokenring.com/setup. The video tutorial features the Token Ring, but the setup process is identical to the BioStick.

Token BioStick and Mac

Mac does not natively support FIDO authentication over Bluetooth.

Token Desktop Utility

What Is It?

• The Token Desktop Utility provides Mac users with Bluetooth functionality for FIDO authentication.
• It is also a simple step-by-step guide to setting up and using your Token BioStick.

Getting Started

1. Download the Token Desktop Utility from the Mac App Store.
2. Open the app and accept the Autofill & Passwords permissions presented by the Token Identity Service pop-up.
3. Follow the on-screen prompts to complete setup, including Bluetooth pairing and fingerprint enrollment.

How to Authenticate

Authentication is performed the same way for both models of the BioStick. Note: The USB-only BioStick must be plugged into your device and does not have NFC and BLE functionality.

[fingerprint sensor] x2 = Authenticated ✔️

[fingerprint sensor] x2 = Authentication Failed ❌

Steps:

• Double tap the fingerprint sensor. The LEDs will turn solid white, indicating it is ready to scan your fingerprint.
• Place the finger you registered on the sensor.
• When you see two green blinks, you have successfully authenticated.
• BioStick Plus: If not plugged into your device, the LEDs will then pulse purple or blue (NFC or BLE).

Seeing Red LEDs?

If the LEDs blink red twice, your fingerprint was not recognized.

Try again:

• Double tap the sensor.
• Adjust your finger position slightly.

If it fails again:

• Make sure your finger and the sensor are clean, dry, and not overly cold.
• Ensure you are using the correct finger.

Switching Authentication Modes

The Biostick Plus supports NFC, BLE (Bluetooth), and USB for authentication. These three modes are interchangeable; you can choose which one to use.

After a successful fingerprint scan, if not plugged into a functioning USB port, the BioStick Plus will display its current mode with pulsing lights:

• Purple = NFC
• Blue = BLE

To switch the mode, tap the sensor once. The BioStick Plus will remember your last used mode and start in that mode at the next authentication.

Other Tap Gestures

Checking Battery Status

To check your battery status, do a single tap on the fingerprint sensor. The LEDs will illuminate with the corresponding battery status color.

[tap gesture] x1 [G] [Y] [R]

Cancelling Any Action

Any active function can be canceled by pressing and holding the fingerprint sensor until the LEDs turn off (approximately 1 second).

Bluetooth Pairing Your BioStick Plus

Navigate to the Bluetooth settings on your device.

Windows users: Locate the Device Settings section. If "Bluetooth devices discovery" is present, switch Default to "Advanced".

Note: If you do not see this section, you may continue to the next step.

Mac users: The Token Desktop Utility will perform BLE pairing with your device during first-time setup (see page 10).

You are now ready to pair your BioStick Plus. Select "Add device" > In the pop-up window, choose "Bluetooth".

Authenticate to your BioStick Plus by double-tapping the sensor and scanning your fingerprint during the solid white LEDs. Pulsing blue LEDs indicate Bluetooth mode; if you see purple LEDs, tap once to switch modes (see page 12).

Once in Bluetooth mode, double-tap the fingerprint sensor to enter pairing mode, indicated by red/blue flashing LEDs.

Select your BioStick Plus from the list of available devices, enter your PIN, then click 'Connect'.

Note: Your PIN can be found inside the box or derived from the serial number engraved on the BioStick (see page 6).

Setting Up Token BioStick as Your MFA

Secure your online accounts and applications in 3 easy steps:

1. Step 1: Login to the app or service you wish to secure and verify that it supports the use of FIDO2 security keys. [key icon]
2. Step 2: Navigate to the Account Security settings and find the option to add a security key as your two or multifactor authentication. If security key is not an option, choose passkey.
3. Step 3: Follow the on-screen prompts. You may use NFC, BLE, or USB to register your BioStick Plus (USB only for the BioStick). Note: BLE requires pairing first (see page 14). [BioStick with checkmark icon]

Visit tokenring.com/works-with for a full list of supported applications.

How to Login With BioStick Plus & BLE

Choose an App or Service: Go to the login screen. Make sure your BioStick Plus is paired to your device (see page 14) and registered with the service (see page 15). Select the option to login using a security key or passkey - instructions may vary between operating systems. [key icon]

Logging In: When prompted, single tap the sensor; this will begin the BLE connection. Follow the on-screen prompt to touch your security key. The BioStick Plus will display solid white LEDs, indicating it is ready for fingerprint authentication. Scan your fingerprint. [BioStick icon]

Successful Authentication: Successful authentication will display two green blinks; you are now securely logged in! If authentication was not successful, you will be prompted to try again. The BioStick Plus will display solid white LEDs for another fingerprint scan. [Bluetooth icon]

How to Login With BioStick Plus & NFC

Enable NFC on Your Device: You may use your device's built-in NFC or connect an external reader. Be sure NFC communication is enabled in your device settings. [NFC text]

Activate NFC Mode on the Ring: Authenticate to your BioStick Plus by double-tapping the sensor and scanning your fingerprint during the solid white LEDs. Successful authentication will display two green blinks then pulse purple, indicating NFC mode. If the pulse is blue, tap once (see page 12 for more details).

Complete Login Using NFC: Place the bottom of the BioStick Plus very close to or touch the NFC reader for 3-4 seconds. Some readers may beep upon scanning; leave the device in place until the login prompt clears. You are now securely logged in! [BioStick icon]

How to Update Your Token BioStick

The Token BioStick can easily be updated over a secure Bluetooth or USB connection.

How to Update your BioStick:

1. Open the Token App.
2. Locate the Details section.
3. If an update is available, select Update.
4. You will be prompted to place the Ring on the charger and click "Let's do it!". [circular arrow icon]

The Token Apps are updated in the same way other applications are; when an update is available, it appears in your App store or automatically updates depending on your device settings.

Extra Token Tips

Using the BioStick Plus While Charging

If the BioStick Plus is plugged into a functioning USB port on your device and authentication is attempted, you may initially be prompted to complete the FIDO authentication via USB. If connected to a charging port not on your device, BLE authentication can be used while charging. [BioStick icon]

Changing Your Scanned Fingerprint

To use a different finger, you will need to perform a factory reset. Warning! This will erase all stored credentials. Go to Settings > Factory Reset in the Token App to begin. See page 9 for fingerprint registration tips. [fingerprint icon]

Extra Token Tips

Logging into Multiple Accounts

Token BioSticks can store up to 100 digital credentials, which can be used with many accounts—personal, work, or managed. Simply set it up as your security key in each application (see page 15). [lock icon]

Replacing Your Phone or Laptop?

No problem! The Token BioStick stores all credentials and biometric data inside its Secure Element. To pair your BioStick with a new phone or device, simply download the corresponding Token App and during setup select "Pair a registered device". If your device is lost or inaccessible, you can still use your BioStick for authentication. [phone with lightning icon]

Troubleshooting

If the BioStick Doesn't Power On

If the LEDs do not display a rainbow pattern when the BioStick is plugged in, double-check the power source. If sufficient, leave it plugged in for at least 30 minutes, then try again. If the LEDs still do not turn on, please contact support. [BioStick icon]

Repeated Issues or 'Stuck' LEDs?

If you are experiencing repeated unexplained issues or your BioStick is 'stuck', plug your device into a charger. The rainbow lights indicate charging has begun, but also perform a 'soft reset' of the device. [circular arrow icon]

Trouble Authenticating

Token Biostick scans your finger multiple times in less than a second. If you are consistently failing fingerprint authentication, try using a clean cloth to ensure both your finger and the sensor are clean, dry, and not overly cold. Also, be sure you are using the correct finger. [fingerprint icon]

If further assistance or troubleshooting is needed, please visit tokenring.com/support.

Caring for Your Sensor

The fingerprint sensor works best when it's clean.

• Use the included purple microfiber cloth to wipe the sensor.
• For deeper cleaning, you may use isopropyl alcohol or a small amount of mild hand soap. Dry the device completely.
• Warning! Do not use ultrasonic cleaners or jewelry-grade solvents – these can damage the sensor and void the warranty.
• For best results, use the BioStick with clean, dry, and warm hands. [BioStick icon] [hand with water drops icon]

Protecting Your BioStick

• Avoid leaving the BioStick exposed to extreme hot or cold environments, such as in a car during the heat of summer or the cold of winter.
• To avoid scratching the finish of the BioStick, avoid coarse, rough surfaces (such as brick, sand, concrete) and sharp metal (such as car keys, key chains, other jewelry). [protection icon]

LED Reference Guide

Authentication

Other

LED Reference Guide

Power Management - BioStick Plus

Battery

Battery while charging

Note: The Token App will display the exact battery percentage with a single tap or anytime using BLE.

Errors

Support

If you need further guidance, a refresher on setting up security keys, or you encountered any issues, please contact us:

• Visit our support page: tokenring.com/support
• Email us at: support@tokenring.com
• Call us at: (866) 328-7464 for assistance.

We regularly add additional written and video implementation guides to our support page. Please let us know if your favorite software is missing and we will assist you.

FCC Regulatory Information

This device (FCC ID: 2AVVU-TOKEN-TR3TBK) complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

• (1) this device may not cause harmful interference, and
• (2) this device must accept any interference received, including interference that may cause undesired operation.

Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause regulatory harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.

Warning: Changes or modifications to this device not expressly approved by Tokenize, Inc could void the user's authority to operate the device. Shielded cables must be used with this unit to ensure compliance with the Class B FCC limits.

RF exposure safety

This product is a radio transmitter and receiver. It's designed not to exceed the emission limits for exposure to radio frequency (RF) energy set by the Federal Communications Commission. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Responsible party for FCC Compliance:

Tokenize, Inc
4545 East River Road, Suite 310
West Henrietta, NY 14586
585-625-8059
support@tokenring.com