FortiToken Mobile

Fortinet

About this app

FortiToken Mobile (FTM) is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost-effective solution for meeting your strong authentication needs. You can deploy FTM tokens using FortiOS, FortiAuthenticator or FortiToken Cloud (2FA-as-a-Service) as the back-end validation server for FTM tokens. Push notifications for approving or denying login attempts are available. FTM also supports third-party tokens for most popular web sites.

Privacy and Control:

FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer.

While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations:
• Access to camera for scanning QR codes for easy token activation
• TouchID/FaceID: used for app security, respectively.
• Access to the Internet for communication to activate tokens and receive push notifications
• "Send Feedback by Email", to automatically populate the "Sender" field
• Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email"
• FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption.

By downloading and Installing FortiToken Mobile, you agree with all terms stated above.

OS Supported: Android 5.0 through Android 11.

Ratings and reviews

Works technically but is an extreme pain to use. Doesn't work with Android quick app switching so when you have to leave your Forticlient VPN, you have to find the icon for this and open it instead of just being able to flip back and forth. Same thing with the VPN app. Then you have to do the same thing in reverse once you copy the code from this app, you have to go back to your home screen, find the VPN and open.I have literally never seen another app not support Android fast app switching.

The app works well, except that the code masking is overkill, and adds a needless step. At the very least, app developers, please enlarge the "eye" you have to touch to unmask the code! With my big fingers, i almost always miss hitting it head-on, and instead of showing the code, it opens up the app serial number and other random stuff and I have to close it out and try again. This little design detail adds soooo much frustration!! (And this is on a Galaxy s8+ with a 6.2" screen!!)

Dear developers, please make the code show upon opening the app rather than having to press unhide each time. It is annoying, especially when the only reason to open the app is to get the code.

What's new

This release includes the following new features & bug fixes:

- FTM Push Approve/Reject not consistent
- Untrusted Server Certificate pop up fix
- Update Target API to 31