Devices used to provide OTP for authorization. Runs their own cryptographic algorithm in sync with the remote server. Types Hard Token Soft Token