FortiToken Mobile is an OATH compliant One-Time Password (OTP) generator application for the mobile device supporting both time (TOTP) and event (HOTP) based tokens.

Strong Authentication at your Fingertips

It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective two-factor solution for meeting your strong authentication needs. This application makes your Android, iOS and Windows mobile devices behave like a hardware-based OTP token without the hassles of having to carry yet another device. Push notification allows you to view login details
on your mobile device to approve or deny with one tap.

Ultra-Secure Token Provisioning

What makes this mobile OTP application superior to others on the market is that while being simple to use for the enduser, and easy to administer and provision for the system administrator, it is
actually more secure than the conventional hard token. The token seeds are generated dynamically, minimizing online exposure. Binding the token to the device is enforced and the seeds are always encrypted at rest and in motion.

Privacy & Control

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires
your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version
to determine app version compatibility.

Leverage Existing Fortinet Platforms

Besides offering out-of-the-box interoperability with any timebased OATH compliant authentication server, such as the FortiAuthenticator from Fortinet, the FortiToken can also be used directly with the FortiGate consolidated security platform, including High Availability configurations.

FortiGate has an integrated authentication server for validating the OTP as the second authentication factor for SSL VPN, IPsec VPN, Captive Portal and Administrative login, thereby eliminating
the need for the external RADIUS server ordinarily required when implementing two-factor solutions.