FortiToken Two-Factor Authentication

Two-factor authentication for the FortiGate estate: hardware OTP tokens, FIDO2 security keys, a mobile soft token and cloud-managed MFA.

FortiToken 210
Hardware token

FortiToken 210

A time-based OATH one-time-password token with a push-button LCD, IP68 casing and up to five years of battery — validated by the FortiGate itself.

OATH TOTPIP68 water-resistantUp to 5-year batteryPerpetual licence
FortiToken 310
USB token

FortiToken 310

A driverless USB smart-card token that acts as a hardware security module for PKI certificates, with onboard RSA, AES and a random number generator.

USB CCID driverlessFIPS-140 compliant64 KB smart cardMS-CAPI and PKCS#11
FortiToken 411
USB-C security key

FortiToken 411

A FIDO2-certified USB-C security key for multi-factor or passwordless sign-in — no drivers, no codes to type, and phishing-resistant by design.

FIDO2 certifiedFIDO U2FUSB 2.0 Type-C5 g
FortiToken Mobile
Software token

FortiToken Mobile

An OATH-compliant soft token for iOS, Android and Windows that turns the phone already in a user’s pocket into the second factor, with a perpetual licence.

OATH compliantiOS, Android, WindowsPerpetual licencePIN protected
FortiIdentity Cloud
Cloud subscription

FortiIdentity Cloud

Hosted multi-factor authentication and SSO, formerly FortiToken Cloud — per-user licensing, push approval, FIDO2 passkeys and no hardware to run.

Hosted by FortinetMFA and SSOFIDO2 passkeysSAML and OIDC
All Fortinet products

Rolling out two-factor authentication?

Tell us the user count, whether you want hardware tokens, FIDO2 keys or the mobile app, and which FortiGate or FortiAuthenticator will validate them. We will come back with the part numbers and the term.

Request a Quote