Fortinet FortiToken 411
Passwordless Authentication

Overview:

FIDO Security Key for Passwordless Online Login

Digital transformation, rapid cloud adoption, and the global shift to remote work have accelerated the evolution of authentication methods. FortiToken 411 is our all-in-one USB-C security key that can be used for multi-factor authentication (MFA) or passwordless login when using online services. FortiToken 411 supports FIDO U2F and FIDO2 protocols. It reduces reliance on passwords while increasing security and protecting user privacy.

What is Fast IDentity Online or FIDO?

FIDO is an evolution of user authentication for online access. It is also known as passwordless authentication. FIDO is an open standard that was developed by the FIDO Alliance and the World Wide Web Consortium. FIDO is a lightweight approach to asymmetric public-key cryptography that extends the security benefits of public-key cryptography to a wider array of applications, domains, and devices. FIDO is designed to reduce (or remove) password usage, avoid the sharing of secrets, and create a path toward using a single credential for authenticating to multiple service providers such as websites and mobile services.

Key Benefits:

• FIDO-enabled client (FortiClient) and browsers, or captive portal with FIDO-enabled browsers
• Protects users from phishing, password theft, and replay attacks
• Provides maximum convenience
• Reduces reliance on or replaces passwords
• Protects user privacy
• Lowers operational costs

Deployment:

FortiToken security keys can store multiple single device passkeys. The rapidly expanding FIDO® authentication ecosystem benefits both business and personal users, allowing them to enhance the protection of their online credentials using FortiToken security keys.

Customers:

• K-12 schools and post-secondary institutions
• Small to medium businesses
• Large enterprises
• Public sector organizations
• Government agencies
• Managed Service Providers (MSPs)

Use Cases:

• Passwordless deployment with FortiIdentity Cloud and FortiAuthenticator
• Passwordless deployment with third party Identity Providers (e.g., Microsoft Entra ID)
• Security keys for Google Workspace and Google Education
• Passkeys for Amazon Web Services (AWS)

Advantages:

• Works with a vast range of applications and web services that have adopted FIDO U2F and FIDO2 protocols. These include SSL VPN with FIDO-enabled client (FortiClient) and browsers, or captive portal with FIDO-enabled browsers
• Protects users from phishing, all forms of password theft, and replay attacks
• Provides maximum convenience with no code to type or drivers to install
• Reduces reliance on or replaces passwords
• Protects user privacy because FIDO cryptographic keys are unique for every service and cannot be used to track users across sites
• Lowers operational costs with the reduction of password-related IT helpdesk support
• Works with a vast range of platforms, operating systems, applications, IdPs, and web services that have adopted FIDO U2F and FIDO2 protocols, including FortiGate VPN with FIDO-enabled FortiClient
• Secures multiple accounts with a single security key for convenience

Specifications:

	FORTITOKEN 411
Compatibility	FIDO® protocol-supported platforms and applications
Storage Temperatures	-20°C ~ 75°C
Operating Temperatures	0°C ~ 50°C
Height x Width x Length (inches)	2 x 0.5 x 0.2 in.
Height x Width x Length (mm)	42.5 x 13.5 x 5.5 mm
Weight	0.2 oz (5 g)
	USB 2.0 Type C
Standards	FIDO U2F and FIDO2 certified
Cryptographic Algorithms	AES, ECDSA, SHA1, SHA256
Compliance	CE FCC ICES UKCA • RoHS REACH
Certifications	FIDO2® Certified

Documentation:

Download the Fortinet FortiToken 411 Datasheet (PDF).

Download theOrdering Guide (PDF).