FortiToken Mobile

Fortinet

About this app

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

I used to be able to authorize on my watch and through notifications if my phone was unlocked now I have to fully open the app. this even messes up the logins of some apps because they don't like to be pushed to the background while logging in(dayforce) now I have to play hot potato now with this

A recent update has introduced inconsistent behaviour when the app is out of focus. It used to simply close any time it wasn't in focus anymore, but now it stays open if the screen locks, which breaks push notifications when it comes into focus after an unlock.

Ruined by latest update. Have to completely open the app now every time. Can't authorize from Galaxy Watch anymore. Only option opens the app on my phone. Can't even authorize from the top notification bar on the phone anymore. On top of that, it sometimes takes up to a solid minute to even pop a notification.

What’s new

- Redesigned lock screen — cleaner biometric and app-PIN unlock with on-screen keypad
- Simpler token adding — tap "+" to scan a QR code directly, with an inline "Enter Manually" option
- Improved token search — rebuilt search bar with reliable tap-to-focus and one-tap clear
- Stability fixes — fixed a startup freeze, and OTP digits clipping on small screens