FortiToken Mobile

Fortinet

About this app

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

Ruined by latest update. Have to completely open the app now every time. Can't authorize from Galaxy Watch anymore. Only option opens the app on my phone. Can't even authorize from the top notification bar on the phone anymore. On top of that, it sometimes takes up to a solid minute to even pop a notification.

The new update makes all codes always visible which makes it too easy to type in the wrong code if you have more than two or three. This should be an option that can be turned on or off, not a global change for all users.

After the Aug 2026 update, the app no longer works with push notifications to wearable devices like Galaxy watches to accept push notifications. Really dissapointed that this feature no longer works, it was very helpful to my workflow.

What’s new

- Redesigned lock screen — cleaner biometric and app-PIN unlock with on-screen keypad
- Simpler token adding — tap "+" to scan a QR code directly, with an inline "Enter Manually" option
- Improved token search — rebuilt search bar with reliable tap-to-focus and one-tap clear
- Stability fixes — fixed a startup freeze, and OTP digits clipping on small screens