FortiToken Mobile

Fortinet

About this app

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

The app works well, except that the code masking is overkill, and adds a needless step. At the very least, app developers, please enlarge the "eye" you have to touch to unmask the code! With my big fingers, i almost always miss hitting it head-on, and instead of showing the code, it opens up the app serial number and other random stuff and I have to close it out and try again. This little design detail adds soooo much frustration!! (And this is on a Galaxy s8+ with a 6.2" screen!!)

Works technically but is an extreme pain to use. Doesn't work with Android quick app switching so when you have to leave your Forticlient VPN, you have to find the icon for this and open it instead of just being able to flip back and forth. Same thing with the VPN app. Then you have to do the same thing in reverse once you copy the code from this app, you have to go back to your home screen, find the VPN and open.I have literally never seen another app not support Android fast app switching.

Replaced my mobile phone and found that the FortiToken app was transferred to the new phone, but none of the tokens were. Tried using the Transfer Tokens function, but an error was generated that could not be resolved. Fortinet support had to send a new registration email for every token that I had in the app (14 in this case). The identities of the tokens changed during this process. I had to manually keep track of which token was for which account.

What's new

FortiToken Mobile for Android 5.3.4 includes the following new features and enhancements:
Support for offline token activation.
Improved security.
Bug fixes.