FortiToken Mobile

Fortinet

About this app

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

App works perfectly and great app. Only issue is it has awful app icon. Please change it to new stylish forti themed one icon lol.

"Login request too soon. Please wait 2 seconds to login again" Logging in from my same device multiple times? Very suspicious.

The app works well, except that the code masking is overkill, and adds a needless step. At the very least, app developers, please enlarge the "eye" you have to touch to unmask the code! With my big fingers, i almost always miss hitting it head-on, and instead of showing the code, it opens up the app serial number and other random stuff and I have to close it out and try again. This little design detail adds soooo much frustration!! (And this is on a Galaxy s8+ with a 6.2" screen!!)

What’s new

Token Readability: Added digit grouping for clearer code display.
Security: Strengthened app access protection.