Hard Token
A hard token is a physical device, like a USB drive or key fob, that generates a one-time password or uses cryptographic keys to authenticate a user's identity, adding an extra layer of security to a login process. It serves as a physical proof of identity that the user possesses, complementing other factors like a password to enable multi-factor authentication (MFA). Examples include USB tokens, smart cards, and Bluetooth or NFC tokens.
How it works
Generates codes: Many hard tokens generate one-time passwords (OTPs) at regular intervals, which are then entered along with a user's password.
Uses public-key cryptography: Other types of hard tokens store cryptographic keys to verify a user's identity, for example, through a smart card or a FIDO2 security key.
Provides a physical key: The token is a physical "key" that a user must possess and often connect to a device to authenticate, making it difficult for remote attackers to compromise.