OTP OATH Compliant, Time-Based TOTP Tokens & Cards

Time-based OTP tokens generate one-time passwords with the OATH-TOTP algorithm, so each code expires after 30 or 60 seconds. This collection includes the C200 (H27) keychain token, the VC-200E display card in a credit card format, the C300 keypad token with challenge-response and transaction signature, and the C300 Voice token for visually impaired users. The C200 in the I34 casing, with IP67 protection, is listed in our full OTP tokens collection. The tokens need no client software on the user's computer, which suits VPN and app logins, staff without company phones and phone-free work areas.

How to Choose a Time-Based OTP Token

  • Microsoft Entra ID or Azure MFA: the C200 and VC-200E both list Microsoft Entra ID as a compatible service.
  • Keychain or wallet: the C200 hangs on a key ring, while the VC-200E fits in a wallet at 85.6 x 54 x 0.84 mm.
  • Transaction confirmation or PIN protection: the C300 adds a keypad and challenge-response.
  • Accessibility: the C300 Voice speaks the passcode and has large LCD fonts.
  • Check compatibility: some authentication services only accept event-based tokens, so confirm your service is on the product page list.

Frequently Asked Questions

How does a time-based OTP token work?

The token and the authentication server share a secret seed, and both compute the code from the current time with OATH-TOTP. A new code appears every 30 or 60 seconds, so a code copied later has already expired, which is why devices such as the VC-200E keep an accurate internal clock.

What seed format do time-based tokens need for Microsoft Entra ID?

Microsoft Entra ID and Azure AD require Base32 seeds, which is FEITIAN's default format for TOTP tokens and cards. The C200 and the VC-200E both list Microsoft Entra ID as a compatible service, and FEITIAN emails the encrypted seed files after shipping with the password in a separate email.

Should I choose a 30-second or 60-second token?

Use the interval your authentication server is set up for. The C200 (H27) generates codes on a 30 or 60 second interval, and the C300 Voice lets you customize the interval (30 or 60 seconds) and the code length (6 or 8 digits).

Can I program my own seeds into a time-based display card?

Yes, with the NFC variation of the VC-200E. It lets you program display cards in your own facilities with an NFC smart card reader or an NFC-enabled mobile device and generate your own seed file. NFC is used only for programming, not for authentication.

Which time-based token suits banking or visually impaired users?

The C300 adds a numeric keypad, multiple-level PIN protection, OATH challenge-response (OCRA) and transaction signature, which banks use to confirm transactions. For blind or visually impaired users, the C300 Voice speaks the passcode and has a large LCD display.