FortiToken Mobile

FortiToken Mobile is an OTP generator app used for MultiFactor Authentication

Fortinet · com.fortinet.android.ftm

Not rated yet 1M+ downloads v6.6.0.0038 15 MB Android 10+ PEGI 3 · Everyone

Download APK 15 MB All versions

Signature matches the Google Play version Details

At a glance

Latest version: v6.6.0.0038 (606000038)
Updated: Aug 28, 2026 (1 month ago)
APK size: 15 MB
Requires: Android 10+ (API 29)
CPU support: x86 64-bit, ARM 32-bit, ARM 64-bit
Category: Business (app)
Listed since: Apr 14, 2021 (at least)
Permissions: 14 (1 sensitive)
Website: fortinet.com
Developer contact: [email protected]
Privacy: Developer's privacy policy

About this APK

FortiToken Mobile is an app by Fortinet in the Business category, listed since at least April 2021. It includes native code for x86 64-bit, ARM 32-bit and ARM 64-bit, so it runs on practically every phone.

Since version 6.3.0.0017, the APK shrank from 18 MB to 15 MB. Since version 5.3.4.0090, the minimum Android version rose from 7.0 to 10. It asks for 14 permissions, 1 of them sensitive: camera. Compared with version 6.5.0.0030, it adds 1 new permission: “Use biometric hardware”.

What's new in v6.6.0.0038

Token Readability: Added digit grouping for clearer code display. Security: Strengthened app access protection.

Description

From the listing uploaded by “appupdater”.

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS, FortiAuthenticator or FortiToken Cloud as for OTP validation server/service. Privacy and Control: FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer. While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations: • Access to camera for scanning QR codes for easy token activation • TouchID/FaceID: used for app security, respectively. • Access to the Internet for communication to activate tokens and receive push notifications • "Send Feedback by Email", to automatically populate the "Sender" field • Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email" • FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption. By downloading and Installing FortiToken Mobile, you agree with all terms stated above. OS Supported: Android 5.0 through Android 11.

Version history

5 versions are listed, going back to v5.3.4.0090. Since v6.3.0.0017 it requires Android 10+.

v6.6.0.0038 LATEST Aug 28, 2026 15 MB TRUSTED v6.5.0.0030 Jun 10, 2026 14.7 MB TRUSTED v6.4.0.0022 Sep 10, 2026 18 MB TRUSTED v6.3.0.0017 Jun 15, 2026 18 MB TRUSTED v5.3.4.0090 Nov 6, 2025 11.1 MB TRUSTED

All 5 versions

Security & authenticity

Security rating: Trusted

Signing certificate

Signature matches the Google Play version Checked by the source store on Aug 28, 2026.
Certificate issued to “Fortinet Inc.” This is the certificate of the Google Play version.
Same certificate as the 4 other versions checked

Store checks and file details

Developer signature verified Aug 28, 2026
Validated against Google Play Aug 28, 2026
Signed byO=Fortinet Inc., ST=CA
Signing certificate (SHA-1)C4:85:E6:D6:9A:42:16:58:05:AB:23:01:0C:D9:D4:3E:8F:9C:31:91
File MD5f7692d518eec6bc9ab8fcf44572f8597
Uploaded by “appupdater” Gold tier · 117,810 followers · uploading since 2020

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures (4 other versions compared). AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Permissions (14)

FortiToken Mobile requests 14 permissions, 1 of them sensitive.

Camera Sensitive android.permission.CAMERA
Change network state android.permission.CHANGE_NETWORK_STATE
Full network access android.permission.INTERNET
Internal broadcast protection (app-defined) com.fortinet.android.ftm.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Prevent the device from sleeping android.permission.WAKE_LOCK
Push messaging (app-defined) com.fortinet.android.ftm.permission.C2D_MESSAGE
Receive push notifications com.google.android.c2dm.permission.RECEIVE
Run at startup android.permission.RECEIVE_BOOT_COMPLETED
Run foreground services android.permission.FOREGROUND_SERVICE
Show notifications android.permission.POST_NOTIFICATIONS
Use biometric hardware android.permission.USE_BIOMETRIC
Use fingerprint hardware android.permission.USE_FINGERPRINT
View Wi-Fi connections android.permission.ACCESS_WIFI_STATE
View network connections android.permission.ACCESS_NETWORK_STATE

FortiToken Mobile APK: questions and answers

Is there a version of FortiToken Mobile for older Android phones?

The current version needs Android 10 or later. Version 5.3.4.0090 is the newest listed build that installs on Android 7.0 and later. Get version 5.3.4.0090 · All versions

Can I install this APK over the version I already have?

Yes, if your installed copy is older. It is signed like the Google Play version, so Android installs it as an update and keeps your data.

Is the FortiToken Mobile APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. Its signature matches the Google Play version. It is signed with the same certificate as the 4 other versions checked. After downloading, check that the file's MD5 is f7692d518eec6bc9ab8fcf44572f8597.