Hardware token authentication is a secure and reliable method of verifying a user’s identity. This method uses a physical device to generate a one-time code used for accessing a system or application. Hardware tokens generate 6 or 8 digit one-time passcodes every 30 or 60 seconds and are compliant to the RFC 6238 standard.
LoginTC Hardware Tokens are available for purchase.
Check out how LoginTC hardware token authentication works with your connectors.
No external dependencies
Simple for end users
Standardized for compliance
Cost-effective
At LoginTC, we’ve created a hardware token trial program to allow administrators to try out the hardware token authentication method at no charge.
As part of the program, you’ll receive two free LoginTC Hardware Tokens sent directly to you along with instructions for how to activate them in your LoginTC Administrator Portal. You can enroll in the program as part of your standard 15-day free trial, or when you become a new customer.
Supported
Hardware Token authentication is supported with our on-premises deployment option, LoginTC Managed.
HOTP Hardware Tokens are also supported in LoginTC Managed.
LoginTC hardware tokens are standard TOTP tokens built to RFC 6238. That means they are not locked to LoginTC. You can register them directly in Microsoft Entra ID as hardware OATH tokens, alongside or instead of a LoginTC deployment.
This matters for one specific problem: Entra self-service password reset. Microsoft’s authentication methods table does not accept External MFA or passkeys as an SSPR method. For a user with no mobile phone, that leaves very few options. A hardware OATH token is one of them.
So if you have staff who cannot or will not use a personal phone, a LoginTC hardware token can cover both sides: the second factor at sign-in, and the registered method Entra will accept for password reset.
Microsoft lists hardware OATH token support in Entra as a preview feature. Check its current status in your own tenant before you plan a rollout around it.
Control which users or groups are permitted to use hardware tokens to authenticate with Polices: Policies Guide
Comprehensive and supporting documentation: Hardware Tokens (OTP) Guide
No internet connection? No problem. Hardware token works offline.
Enable offline authentication for the LoginTC Windows Logon and RDP Connector in the LoginTC Admin Panel to keep your employees connected and productive.
Learn more about Offline Authentication
Yes, Hardware Tokens can be used offline.
Yes, Hardware Tokens are available on-premises. Check out our on-premises page to see all available authentication methods.
Hardware tokens can be purchased from LoginTC for $10. If you are interested in using Hardware Tokens with your LoginTC trial, contact us to receive two free Hardware Tokens.
The battery in Hardware Tokens lasts between 3-5 years.
Yes. LoginTC hardware tokens are standard TOTP tokens conforming to RFC 6238, so Entra ID can register them as hardware OATH tokens. This also makes them usable as a registered method for Entra self-service password reset, which does not accept External MFA or passkeys. Hardware OATH token support in Entra is a preview feature, so confirm its status in your tenant before planning a rollout.
Your organization is unique, and so are your security needs.
Contact us today for a no-commitment consultation call with an MFA expert.
Contact us
