Passwordless shop-floor security and worker safety in one wearable
Crayonic Badge™ gives operators, technicians and engineers phishing-resistant, presence-based touchless login to shared HMIs, MES and ERP terminals, plus physical access and personal safety: a panic button, location-aware alerts and evacuation mustering. It is one certified device, worn all shift.
Shared terminals are the weak point of the smart factory
Production lines run on shared workstations, HMIs and tablets. Passwords get written on the machine, accounts get shared between shifts, and nobody can say who changed a recipe or setpoint. Ransomware and phishing campaigns increasingly target manufacturers, and NIS2 now names manufacturing among its regulated sectors. Meanwhile, safety teams run separate systems for lone-worker alarms, access cards and headcounts.
The Badge brings these together. One wearable identifies the person at the machine, opens the doors they are cleared for, and calls for help when something goes wrong.
Security on the shop floor
Touchless login at shared stations
Presence-based login over secure Bluetooth, even with gloves on: operators are logged in when they approach a station and logged out when they walk away. No shared accounts, no passwords on sticky notes.
Phishing-resistant MFA
FIDO2 passkeys in a Common Criteria EAL5+ secure element protect Microsoft Entra ID, Windows, MES, ERP and engineering workstations against credential theft.
Accountability for every change
Every login and approval is tied to a person, not a shared account. Crayonic Device Manager keeps an audit trail and feeds your SIEM.
Works on isolated OT networks
Authentication runs on the device and on local infrastructure, so it keeps working on segmented or air-gapped production networks and during cloud outages.
Physical access in the same device
A slot for your existing access or photo ID card, plus NFC, controls entry to production halls, clean rooms, server rooms and hazardous zones.
Sign-offs that hold up in an audit
Use cryptographic e-signatures for batch records, quality releases, maintenance permits and lock-out/tag-out confirmations, with the details shown on the Badge's own display.
Personal safety built in
Panic button
One press raises an alarm and shares the wearer's location with responders through compatible RTLS services.
Critical alerts on the wrist or lanyard
Evacuation orders, gas or fire alarms and line-stop messages reach the right people instantly, with a buzzer and an e-ink display that stays readable.
Mustering and headcount
Indoor location shows who is still inside a zone during an evacuation, and who was near an incident.
Supporting your compliance
| Framework | How Crayonic Badge helps |
|---|---|
| NIS2 (manufacturing is a regulated sector) | Phishing-resistant multifactor authentication, access logging and central credential management. |
| IEC 62443 (industrial automation security) | Unique identification and strong authentication of human users at operator and engineering stations, with an audit trail. |
| Cyber Resilience Act and supply-chain security | EU-designed and EU-manufactured hardware, with critical components made in the EU. |
| Occupational health & safety / lone-worker rules | Panic button, location-aware alarms and mustering support. |
Compliance depends on your wider policies, processes and systems. The Badge provides the identity, access and safety controls.
Frequently asked questions
Can operators log in to shared HMIs and terminals without passwords?
Yes. A small Crayonic Bridge on each station connects to the Badge over secure Bluetooth. Operators are logged in automatically when they approach with their Badge and logged out when they walk away, without touching anything. Where stations stand close together, login can require a tap on an NFC reader instead.
Does the Badge work with gloves and in harsh environments?
Login is proximity-based, so operators don't need to type. The body is IP64 water-resistant and compatible with cleaning agents, and the battery lasts weeks between charges.
How does the Badge improve worker safety?
It combines a panic button, critical alerts and indoor location in the device workers already wear for login and access. An alarm tells responders who needs help and where.
Does it work on air-gapped or segmented OT networks?
Yes. Authentication runs on the device and on local infrastructure, with no dependence on the cloud. Crayonic Device Manager and Credential Manager can be deployed on-premises.
Can one Badge handle both IT and OT access?
Yes. The same FIDO2 credentials protect office IT (Microsoft Entra ID, Microsoft 365) and production systems, and the card slot and NFC handle doors and turnstiles.
Pilot the Badge on your production line
Start with one line or site: shared-station login, access control and lone-worker safety, managed centrally.
Book a demoExplore Crayonic Badge