What is an authentication token device?
An one-time passcode (OTP) authentication hardware token is a small device with an internal passcode generator that can be associated with a Two-Step Login account. With the press of a button, it will generate and display a single-use passcode that the owner enters into a computer to complete the second step of a login.
A token device that works with the University of Iowa's Two-Step Login system is shown above. The green button generates a passcode that remains valid for 30 seconds. Pressing the button again generates a new passcode.
- The token device is designed to attach to your key chain.
- Tokens cannot be shared, as they are uniquely associated with a single HawkID account.
- If a token is lost or stolen, there is no way to determine it is associated with a HawkID account. If the token is lost with a set of physical keys, it may be possible to identify its owner. But the device cannot be used by anyone who does not know the associated HawkID and password.
Faculty, staff, and students who cannot utilize other supported devices for Two-Step Login—a cellular or mobile phone, the Duo Mobile app on a tablet or smartphone, a landline telephone, or a list of saved passcodes—may request a token device.
Tokens have a finite battery life and carry an associated cost. For these reasons, we recommend using one of the other supported options for completing your Two-Step Logins.
However, some circumstances may prohibit use of other supported options. These include:
- Computer logins performed in restricted areas where mobile phones are not allowed and landline phones are not available
- Computer logins performed in areas that do not have cellular or wireless service, or assigned landline phones, by users without smart phones (which can be used to complete Duo Mobile app logins even when there's no cellular/wireless service)
- Logins performed by users who do not have mobile phones, cell phones, tablets, nor unique landline phone numbers to enroll in their Two-Step profiles
- Logins by users who do not have the ability to carry other devices to locations where they need access protected applications.
Other situations will be considered on a case basis.
Send an email to the ITS Help Desk (email@example.com) requesting a token. Provide an explanation for your request, and include your name, HawkID, and phone number.
A token device will be associated with your HawkID account and Two-Step Login profile.
When the token has been set up, you will be contacted to pick up your device at the ITS Help Desk (second floor, 2800 University Capitol Center). You'll be required to provide proof of your identity—Iowa One Cards, valid driver's licenses, or passports will be accepted.