What is a hard token?
A hard token, sometimes called a security key, is a physical device that functions like a key for gaining access. It is a physical device that helps verify your identity or log onto a system like a personal computer, hosted software application, network, or other electronic device. Hard token devices store authentication secrets or passcodes in a digital format.
What does a hard token look like?
There are a variety of hard tokens available on the market, but most are small and designed to be carried like key fob. Typically, a hard token device is around two to three inches long. Some hard tokens can be inserted directly into a computer like a USB device. Other hard tokens are small pieces of hardware with a small screen that displays security passcodes that you use to complete authentication.
How do hard tokens work?
Hard tokens are most often used for multi-factor authentication (MFA). You can pair your hard token with a password to sign into a device, software application or website. USB type hard tokens, when inserted into a device, pass on a secret piece of information that is unique to that hardware device for authentication purposes. USB type hard tokens can also support password-less login.
Hard tokens designed with a screen, generate then display a unique, one-time code that you enter along with your password on a login page. The user may have to click a button on the hard token to generate a new passcode.
Because hard tokens are a physical device that often work offline, they are generally considered very secure against online threats like phishing and malware. Hard tokens make multi-factor authentication easy and secure, they help protect your personal data and prevent hacks or account take overs.
Who makes hard tokens?
Several companies manufacture hardware tokens for multi-factor authentication (MFA). Popular manufacturers of hard token devices include:
Yubico
Yubico makes a variety of hard tokens and smart card devices. Its most popular product is called the Yubikey. Yubico makes hard token devices that can be inserted into USB-A, USB-C, Lightning or NFC port.
Yubico’s hard tokens work with hundreds of services including, Windows, MacOS, Gmail, Dropbox, Facebook, Salesforce, and Duo.
Token2
Token2 makes a broad range of hard tokens, both USB-based, plug in type hard tokens and traditional hard tokens that display codes on a screen. Token2 hard tokens are supported by Apple (MacOS), Microsoft (Windows and Azure) and Google. Web browsers that support Token2 hard tokens include Chrome, Firefox, Edge, and Safari.
RSA
RSA also makes physical hard tokens. Their current product is called the RSA iShield Key. The RSA hard tokens can be inserted into USB-A and USB-C ports.
The RSA iShield is supported by these Operating System platforms: Windows 10/11, macOS, iOS, iPadOS, Linux, Chrome OS, Android. The RSA hard token is also supported by these browsers: Firefox, Microsoft Edge, Chrome, and Apple Safari.
Thales
Thales makes an assortment of hard token and smart card physical devices. They manufacture USB-based, hard tokens that can be inserted into USB-A and USB-C ports. They also make a traditional hard token that displays codes on a screen called the SafeNet OTP 110 token.
Thales hard tokens are supported by Apple (MacOS), Microsoft (Windows, Azure, and Outlook), Linux and Google.
Cost for a hard token?
Prices range from $30 to $100 each depending on the brand, security features and hard token type.
Use our Amazon Affiliate link to purchase your Yubikey Hard Token. Note: Our website does receive commission from your purchase. We personally use and LOVE the Yubikey.
Buy Yubikey on Amazon.com: https://amzn.to/4kuih4Z
In summary, hard tokens are physical devices that help protect your online accounts and computers. Users are required to prove that the hard token is in their physical possession during the authentication process. Hard tokens make multi-factor authentication easy and secure. These devices are a great investment for securing personal data and help prevent hacks and account take overs.