FortiToken Mobile

Fortinet

About this app

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

The app works well, except that the code masking is overkill, and adds a needless step. At the very least, app developers, please enlarge the "eye" you have to touch to unmask the code! With my big fingers, i almost always miss hitting it head-on, and instead of showing the code, it opens up the app serial number and other random stuff and I have to close it out and try again. This little design detail adds soooo much frustration!! (And this is on a Galaxy s8+ with a 6.2" screen!!)

Works technically but is an extreme pain to use. Doesn't work with Android quick app switching so when you have to leave your Forticlient VPN, you have to find the icon for this and open it instead of just being able to flip back and forth. Same thing with the VPN app. Then you have to do the same thing in reverse once you copy the code from this app, you have to go back to your home screen, find the VPN and open.I have literally never seen another app not support Android fast app switching.

Works, but not well. It won't read the QR code in the email that FortiNet sends you. You have to enter the code manually, but even that is confusing. They list two codes, but it is not the first one, it is the second one. But they don't make it real clear. Tech support can't see your emails that are sent to you. But ultimately, did get it working. It's just not really good. One star.

What's new

FortiToken Mobile for Android 5.3.4 includes the following new features and enhancements:
Support for offline token activation.
Improved security.
Bug fixes.