Kensington VeriMark™ Gen2 USB-A Fingerprint Key Reader - Windows Hello & Windows Hello for Business, Tap and Go, Anti-Spoofing (K64704WW)

Quick take

The Kensington VeriMark™ Gen2 is a USB-A fingerprint key reader built for Windows Hello (Windows 10/11) and Windows Hello for Business, aiming to make sign-in fast and passwordless. It also supports Tap and Go via CTAP2, which can help with passkey-style flows and compatible password managers. The main caveat is that real-world reliability seems to vary by user scenario, with some experiences reporting trouble after the PC has been idle, so it may not be ideal for everyone.

Pros and cons

Pros

  • Made for Windows Hello and Windows Hello for Business on Windows 10 and Windows 11.
  • Tap and Go support using CTAP2 for passkey access and compatible password manager sign-in.
  • Built with anti-spoofing and sensor-side security claims (fingerprint data isolated, encrypted match transferred).
  • Supports multiple fingerprints (up to 10) for different users or preferences on the same Windows device.

Cons

  • Not compatible with MacOS or ChromeOS.
  • Buyer feedback is mixed, including reports of reduced performance after the laptop has been idle (some users ended up using a PIN).
  • Installation may require manually downloading and installing drivers for some setups.

What buyers think

Reviewed productBuy on Amazon

Buyer-review evidence is mixed, with a clear split between fast, smooth unlock experiences and scenarios where fingerprint recognition becomes unreliable. Positive feedback centers on quick Windows sign-in when the finger is placed correctly, easy daily use, and a “just works” feel once set up. Negative feedback focuses on inconsistent recognition after the device has been idle, where the user may fall back to a PIN. Overall, the evidence suggests performance can be strong for active, day-to-day use, but long-idle wake situations may be a weak spot for some systems.

How it works with Windows Hello

This fingerprint key is designed to plug into a Windows device and integrate with Microsoft’s Windows Hello login flow. That means it’s intended to replace passwords and reduce repeated username and password entry during sign-in to your Windows session and supported Microsoft experiences. It’s also set up to work with Windows Hello for Business, which can matter for business environments and policy-based authentication.

It supports up to 10 different fingerprints, which can be useful if multiple fingers are preferred or if an organization needs flexibility during enrollment.

Passkeys and tap and go (CTAP2) support

Beyond Windows login, the VeriMark™ Gen2 supports Tap and Go using the CTAP2 protocol. In practical terms, this positions the reader for passkey-style authentication flows and can tie into compatible password managers for faster website logins and autofill-style experiences. If your goal is not only unlocking Windows, but also reducing password friction across web sessions, this is one of its stronger feature angles.

That said, passkey ecosystems and password manager support can depend on your specific software version and configuration, so it’s worth confirming compatibility with the password manager and browser workflow you plan to use.

Security and anti-spoofing approach

Reviewed productBuy on Amazon

Kensington positions the VeriMark™ Gen2 as anti-spoofing capable, and it includes a security model where fingerprint data is isolated within the sensor and only an encrypted match is transferred. It also cites biometric performance targets using FRR and FAR numbers. For buyers, the takeaway is that it is built around sensor-side matching and spoof resistance, rather than simply “reading a fingerprint and sending it around.”

If your organization evaluates authentication devices with privacy and enterprise policy requirements in mind, these design goals align with common IT security concerns, especially when passwords are not stored on servers.

Pros and cons for different buyer types

Best for

  • Windows 10 or Windows 11 users who want a USB-A fingerprint option for Windows Hello and Windows Hello for Business.
  • People who value quick daily sign-in on a work laptop and want a physical authentication method that is always available when plugged in.
  • Organizations or teams standardizing on enterprise-friendly authentication setups and a privacy-focused approach to credential handling.
  • Buyers looking for a device that can also participate in passkey-style Tap and Go flows (via CTAP2) for website authentication and password manager integration.

Who should avoid it

  • Anyone using MacOS or ChromeOS, since it’s not compatible with those platforms.
  • People who need consistent fingerprint unlock behavior after long idle periods, based on mixed buyer experiences.
  • Buyers who want a frictionless, driver-free setup in every environment. If your IT image doesn’t support the device automatically, you may need to handle driver installation manually.

Setup and day-to-day use considerations

Most buyers describing the product positively mention quick unlock times and dependable daily operation. However, real-world performance may depend on enrollment quality and how you place your finger.

If your workflow includes locking your PC and returning after a long idle period, it’s wise to validate the behavior in your own usage pattern after enrollment. The review evidence includes at least one report where the device became unreliable in that exact scenario.

Price and availability

Reviewed productBuy on Amazon

List price is shown as $178.98, with the current price presented on the product page as $44.99. Availability is listed as in stock in the marketplace view you’re browsing.

Verdict

The Kensington VeriMark™ Gen2 is a strong option for Windows users who want a fingerprint key for Windows Hello and Windows Hello for Business, plus Tap and Go (CTAP2) support for passkey-style authentication. The biggest question mark is reliability in less active situations, since buyer feedback includes reports of reduced recognition after the laptop has been idle. If you mostly unlock frequently during active use, it looks like it can deliver the fast, convenient sign-in experience people are shopping for. If your primary use case involves long idle periods and you cannot tolerate fallbacks to PIN, it’s worth considering whether a different approach or another device is a better fit.

FAQ

  • Is the Kensington VeriMark™ Gen2 compatible with MacOS or ChromeOS?No. It is designed for Windows Hello on Windows 10 and Windows 11, and it is not compatible with MacOS or ChromeOS.
  • Does it work with Windows Hello for Business?Yes. It is designed to support Windows Hello for Business on compatible Windows devices.
  • What is Tap and Go, and does this reader support it?Tap and Go is a passkey-style authentication flow that uses the CTAP2 protocol, and this reader supports it.
  • How many fingerprints can it support?It supports up to 10 different fingerprints.
  • Will it replace usernames and passwords for websites?It supports Tap and Go CTAP2 authentication flows and is described as compatible with popular password managers (Premium tiers for some products). Exact website behavior depends on your password manager and browser setup.
  • What’s the main drawback to consider before buying?While many buyers report fast and easy unlock, some experiences indicate inconsistent recognition after the computer has been idle for several hours. If that matches your usage pattern, test your workflow after enrollment.

Find it on amazon

Buy on Amazon

Reviewed productBuy on Amazon

Specifications

Product TitleKensington VeriMark™ Gen2 USB-A Fingerprint Key Reader - Windows Hello & Windows Hello for Business, Tap and Go, Anti-Spoofing (K64704WW)
CategoryElectronics > Security & Surveillance > Biometrics
ManufacturerKensington
Item Weight0.8 ounces
Product Dimensions5.1 x 3.7 x 0.9 inches
Item model numberK64704WW

Available variants

Size

  • Upgraded IT 2.0 - USB-C
  • Upgraded IT 2.0 - USB-A
  • IT 1.0

Recommended next