FortiToken Mobile: Secure OTP Generator for Multi-Factor Authentication

Overview

FortiToken Mobile is an OATH-compliant application that generates both event-based and time-based one-time passwords (OTP) for mobile devices. Serving as the client component of Fortinet's authentication solution, it provides robust security while maintaining ease of use and administration. The application requires FortiOS, FortiAuthenticator, or FortiToken Cloud for OTP validation services.

Privacy Protection

FortiToken Mobile strictly limits device access. The application cannot:

• Modify phone settings without permission
• Access camera/video functions
• Record or transmit audio
• Read or send emails
• Access browser history
• Remotely wipe your device

The app only verifies OS version for compatibility purposes. Sensitive information such as email addresses or token seeds may be entered during manual token installation processes.

Required Permissions

FortiToken Mobile requests these permissions for specific functionality:

• Camera access (QR code scanning for token activation)
• Biometric authentication (TouchID/FaceID for app security)
• Internet connectivity (token activation and push notifications)
• Email composition (pre-populating sender information)
• Internal file sharing (email attachment preparation)
• Device wake-lock (preventing database corruption during updates)

System Requirements

Android OS compatibility: Version 5.0 through 11.0

By installing FortiToken Mobile, you acknowledge acceptance of these terms and conditions.