Turvatunnisteet

Turvatunnisteet, often translated as security tokens or authentication tokens, are physical or digital devices used to verify a user's identity for access to systems or sensitive information. Their primary purpose is to add an extra layer of security beyond a simple username and password, a practice known as two-factor authentication (2FA) or multi-factor authentication (MFA).

Physical turvatunnisteet can take various forms. Hardware tokens, often small key fobs, generate one-time passwords (OTPs) that change periodically or with each use. These OTPs are then entered along with the user's regular credentials. Other physical tokens might require a fingerprint scan or a PIN entry.

Digital turvatunnisteet are software-based. This can include authenticator apps on smartphones that generate time-based one-time passwords (TOTPs), similar to hardware tokens. Alternatively, they can be digital certificates stored on a device or cloud-based services that use push notifications to confirm login attempts. When a user attempts to log in, the system sends a prompt to the registered digital token, and the user must approve the request to complete the authentication.

The use of turvatunnisteet significantly enhances security by making it much harder for unauthorized individuals to gain access, even if they have obtained a user's password. This is because they would also need physical possession of the token or access to the authenticated device.