- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
Fortinet FortiToken 411
A FIDO2-certified USB-C security key for multi-factor or passwordless sign-in — no drivers, no codes to type, and phishing-resistant by design.
- Certified to both FIDO U2F and FIDO2
- Works with FIDO-enabled FortiClient, browsers and captive portals
- Resists phishing, password theft and replay attacks
- No drivers to install and no code to type in
- USB 2.0 Type-C, 42.5 x 13.5 x 5.5 mm, 5 g
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Hardware Tokens
The physical token, supplied in packs, with a perpetual licence and no annual subscription on the hardware.
Fortinet Hardware Tokens
-
Fortinet FortiToken 411 — 5-token pack FortiToken-411 Five pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 #FTK-411-5Get a Quote
-
Fortinet FortiToken 411 — 20-token pack FortiToken-411 Twenty pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 #FTK-411-20Get a Quote
-
Fortinet FortiToken 411 — 100-token pack FortiToken-411 One Hundred pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 #FTK-411-100Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiToken 411 Specifications
Fortinet published maximums, measured under the test conditions noted below.
Technical
| Compatibility | Platforms and applications that support the FIDO protocols |
|---|---|
| Interface | USB 2.0 Type-C |
| Standards | FIDO U2F and FIDO2 certified |
| Cryptographic Algorithms | AES, ECDSA, SHA1, SHA256 |
Dimensions
| Height x Width x Length | 42.5 x 13.5 x 5.5 mm (2 x 0.5 x 0.2 in) |
|---|---|
| Weight | 5 g (0.2 oz) |
Power and Environment
| Operating Temperature | 0°C to 50°C |
|---|---|
| Storage Temperature | -20°C to 75°C |
Compliance and Certifications
| Compliance | CE, FCC, ICES, UKCA, RoHS, REACH |
|---|---|
| Certifications | FIDO2 certified |
Token hardware ships with a perpetual licence — there is no annual subscription on the token itself.
A FortiGate or FortiAuthenticator validates the token, so no separate authentication server is required.
Specifications are as published by Fortinet and may change without notice. Confirm the current revision before ordering.
FortiToken 411
A FIDO2-certified USB-C security key for multi-factor or passwordless sign-in — no drivers, no codes to type, and phishing-resistant by design.
Multi-factor or passwordless, on an open standard
The FortiToken 411 is a USB-C security key that handles multi-factor authentication, or passwordless sign-in, for online services. It implements FIDO U2F and FIDO2, the open standards from the FIDO Alliance and the W3C, which reduce reliance on passwords, strengthen security and protect user privacy.
Public-key cryptography instead of shared secrets
FIDO uses public-key cryptography, so there is no shared secret held on the server that can be stolen in a breach, and a single credential can be used across multiple services. Because the key proves the identity of the site as well as the user, it resists phishing and replay attacks in a way that one-time codes cannot. For a helpdesk, the practical effect is fewer password resets.
Interested in the Fortinet FortiToken 411?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote