FortiToken Mobile is an OATH-compliant, event-based and time-based One Time Password (OTP) generator app designed for mobile devices. It serves as the client component of Fortinet's robust, user-friendly, and cost-effective solution for MultiFactor Authentication (MFA). To validate OTPs, you'll need to use FortiOS, FortiAuthenticator, or FortiToken Cloud as the server/service.

Privacy and Control:

FortiToken Mobile respects your privacy and control over your device. It does not have the ability to alter your phone's settings, capture images or videos, record or transmit audio, or access your emails. Additionally, it does not monitor your browsing history. Any notifications or setting changes require your explicit permission. FortiToken Mobile also cannot perform a remote wipe of your device. The app only needs to check your OS version to ensure compatibility with the app version. During manual installations of FortiToken tokens, 3rd Party tokens, and Token Transfer, you may need to enter sensitive information like email addresses or Token seeds.

While FortiToken Mobile will not change any settings without your consent, the following permissions are necessary for its operation:

• Camera access is required to scan QR codes for seamless token activation.
• TouchID/FaceID is used to enhance app security.
• Internet access is needed for token activation and receiving push notifications.
• The "Send Feedback by Email" feature uses your email address to automatically fill the sender field.
• The app may share files internally between applications to prepare attachments for feedback emails.
• FortiToken Mobile keeps the phone awake during database upgrades to prevent data corruption.

By downloading and installing FortiToken Mobile, you agree to the terms outlined above.

Supported Operating Systems: Android 5.0 through Android 11.