Two types of OTPs (TOTP and HOTP) displays on the FortiToken Mobile Application:
- Event-based or HMAC-based (HOTP): The token passcode is generated using an event trigger and a secret key. User presses ‘Next OTP’ to display new OTP value
- Time-based (TOTP): User presses the Eye icon to hide/show the OTP. The timer bar next to the Eye icon shows how much time is left before a new OTP value will be displayed. The token OTP changes every 60 or 30 seconds. This time is configurable on the FortiAuthenticator and FortiToken Cloud Setting.
FTM IOS, Android, and Windows support both TOTP and HOTP.
FortiAuthenticator supports HOTP and TOTP.
FortiGate and FortiToken-Cloud only support TOTP.
Your OTP can be copied to your clipboard by tapping the number displayed, then tapping “copy”. This is useful in situations such as when you are using a VPN client on a mobile device and need to enter the OTP as the second factor for logging in.
|FTM IOS||From the FTM IOS token list view, pull down to show the search bar and pull up to hide the search bar. Tap the search bar, then type letters to match to token names in the list. FTM IOS will return a list of matched tokens. Press back for the app to go back to main token list with the selected token moved to the top of list.|
|FTM Android||From the FTM Android main token list view, the search icon displays at the top right. Pressing the search icon opens the search bar. Type letters to match to tokens and tap a token to move it to the top of the list. This movement should be accompanied by a short message ‘Move token to top’.|
|FTM Windows||Does not support this feature|
Both TOTP and HOTP unhide after they are activated. TOTP can show/hide by pressing the eye icon. Its hide/show status is retained after exiting or re-launching the app. HOTP is hidden all the time after exiting or re-launching the app. The only way to unhide an HOTP is by pressing ‘Next OTP’.
Long press the token on the tokens screen to edit the Token Name.
Press the arrow from the token list view to see a token's details including an editable token name, issuer serial number, and issuer name.