Turvatunnistimet

Turvatunnistimet, or security tokens, are physical devices or software programs used to authenticate a user's identity during a login process. They are a crucial component of two-factor authentication (2FA) or multi-factor authentication (MFA), adding an extra layer of security beyond just a username and password.

There are several types of turvatunnistimet. Hardware tokens are small, portable devices, often resembling key fobs, that generate one-time passwords (OTPs). These OTPs change regularly and are used in conjunction with a user's static credentials. Software tokens, on the other hand, are applications installed on a smartphone or computer. These applications also generate OTPs, often called time-based one-time passwords (TOTP) or HMAC-based one-time passwords (HOTP), which are synchronized with a server. Another form is the FIDO security key, a physical device that uses public-key cryptography for authentication, offering a passwordless experience in many cases.

The primary purpose of turvatunnistimet is to mitigate the risks associated with compromised passwords. Even if a username and password are stolen, an attacker would still need physical access to the token or the device running the software token to gain entry. This significantly enhances the security of online accounts and sensitive data. They are widely used in corporate environments, online banking, and for accessing personal accounts requiring a higher level of protection.