FortiToken Mobile: Secure, One-Tap Authentication for the Modern Workforce

Protect your professional accounts with enterprise-grade multi-factor security. Seamlessly approve logins via push notifications and biometrics while keeping your personal data private.

Publisher

Fortinet, Inc

Security at a Glance

Discover the interface used by 3M+ users.

FortiToken Mobile screen showing a six digit authentication code

FortiToken Mobile account details screen showing token name and serial number

FortiToken Mobile manual entry screen showing options for adding Fortinet accounts and third party accounts

Interface of the FortiToken Mobile app showing a six digit one time password for secure login

Secure Access, Simplified

The tools that make this app stand out, trusted by 3M+ users.

⚡

Instant One-Tap Login

Say goodbye to manual codes. Approve secure access requests instantly via push notifications for a frictionless workflow.

🛡️

Enterprise-Grade Privacy

Your personal data stays personal. We never access your photos, browser history, or messages, ensuring total BYOD peace of mind.

👤

Seamless Biometric Security

Unlock your tokens effortlessly using FaceID or TouchID, combining high-level security with the convenience you expect from your iPhone.

Loved by users worldwide

Trusted by 3M+ people who love this app.

"Switching from hardware tokens to FortiToken Mobile was a game changer for our hybrid team. The Push notifications make logging into the VPN seamless, and the FaceID integration adds that extra layer of security without the manual hassle of typing codes."

Mark S., IT Infrastructure Manager

"As someone who uses a personal device for work, I was initially worried about privacy. This app is transparent about its permissions and doesn't overreach. It is simple, reliable, and makes secure remote access completely frictionless."

Elena R., Senior Project Lead

Review Analysis

Insights from user reviews.

Sentiment Score

20%

Negative

Summary

The app receives predominantly negative feedback, primarily due to severe stability issues. Many users report that the app crashes immediately upon opening or fails to launch entirely, especially after recent updates to version 5.5.0 and on iOS 18.5 and iOS 26. Additionally, several users experienced problems with notifications, ranging from not receiving them at all to them disappearing, and a specific bug where 6-digit codes do not refresh automatically. On the positive side, a small number of users found the app simple, practical for corporate use, and appreciated its integration with Apple Watch, though these positive aspects are largely overshadowed by widespread critical bugs.

Common Themes

App Crashing(39)

Notification Problems(6)

Simplicity(2)

Outdated Interface(2)

Apple Watch Integration(1)

Six-Digit Code Refresh Issue(1)

About the app

Everything you need to know about FortiToken Mobile.

Description

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS or FortiAuthenticator as the back-end validation server. Requires iOS 12 or later. Compatible with iPhone, iPad, and iPod touch. Privacy and Control: FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer. While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations: • Access to camera for scanning QR codes for easy token activation • TouchID/FaceID: used for app security, respectively. • Access to the Internet for communication to activate tokens and receive push notifications • "Send Feedback by Email", to automatically populate the "Sender" field • Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email" • FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption. By downloading and Installing FortiToken Mobile, I agree with all terms stated above.

Latest Version

6.1.0

Size

18.7 MB

First Released

Feb 10, 2012

Secure Your Connection in Seconds

Join over 3 million professionals who trust FortiToken Mobile for seamless, privacy-focused authentication. Download now for fast, one-tap access to your secure workspace.

FAQ

Frequently Asked Questions

Everything you need to know about FortiToken Mobile

What is FortiToken Mobile?

FortiToken Mobile is an OATH compliant One Time Password (OTP) generator for mobile devices. It functions as the client component of Fortinet's secure strong authentication solution.

Does FortiToken Mobile require a server to function?

Yes, FortiToken Mobile requires FortiOS or FortiAuthenticator to serve as the back-end validation server. This setup enables its strong authentication capabilities.

What operating systems are compatible with FortiToken Mobile?

FortiToken Mobile is compatible with iOS 12 or later. It runs on iPhone, iPad, and iPod touch devices, ensuring broad Apple device support.

Does FortiToken Mobile access my personal data or phone functions?

FortiToken Mobile does not read emails, see browser history, or record audio/video. It requires permission for notifications and specific functions like camera access for QR codes.

How do I add a new authentication token in FortiToken Mobile?

You add a new token in FortiToken Mobile by tapping the "+" button in the interface. This allows activation via QR code scanning or manual entry of details like account name and secret key.