{"id":7055,"date":"2020-12-09T17:24:26","date_gmt":"2020-12-09T14:24:26","guid":{"rendered":"https:\/\/www.protectimus.com\/blog\/?p=7055"},"modified":"2026-11-02T14:27:28","modified_gmt":"2026-11-02T11:27:28","slug":"programmable-totp-token-protectimus-flex","status":"publish","type":"post","link":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/","title":{"rendered":"How to Program a TOTP Token for Any Service"},"content":{"rendered":"\n<figure class=\"wp-block-embed is-type-rich is-provider-soundcloud wp-block-embed-soundcloud alignright wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"New Programmable TOTP token Protectimus Flex by Protectimus\" width=\"838\" height=\"400\" scrolling=\"no\" frameborder=\"no\" allow=\"autoplay; encrypted-media\" src=\"https:\/\/w.soundcloud.com\/player\/?visual=true&#038;url=https%3A%2F%2Fapi.soundcloud.com%2Ftracks%2F1146167449&#038;show_artwork=true&#038;maxheight=1000&#038;maxwidth=838\"><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Listen to this article<\/figcaption><\/figure>\n\n\n\n<p>To program a TOTP hardware token, you start two-factor setup on the service as if you were adding an authenticator app, then write the QR code&#8217;s secret key into the token instead. With Protectimus Flex or Slim NFC, the Protectimus TOTP Burner app on an NFC-enabled Android phone transfers the key and sets the token&#8217;s clock.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is a Programmable TOTP Token?<\/h2>\n\n\n\n<p>Hardware TOTP tokens come in two kinds. A classic token has its secret key (seed) written at the factory, and the administrator imports that seed into the MFA system. A programmable token arrives empty, or with a key you can overwrite, and you write the key yourself, taken from the service you want to protect. For a broader look at the difference, see <a href=\"https:\/\/www.protectimus.com\/blog\/hardware-or-software-token-which-one-to-choose\/\">how hardware and software tokens compare<\/a>.<\/p>\n\n\n\n<p>That difference changes where the token can be used. A classic token only works with systems that let an administrator import seeds. A programmable token works with any service that offers &#8220;use an authenticator app&#8221; during two-factor setup, because the token simply takes the place of the app. No Protectimus account or platform is needed for this.<\/p>\n\n\n\n<p>A programmable token holds one secret key at a time, so it protects one account. When the account is no longer needed, or the token moves to another employee, you write a new key over the old one. The <a href=\"https:\/\/www.protectimus.com\/token\/flex\/\">Protectimus Flex programmable token<\/a> can be reprogrammed an unlimited number of times.<\/p>\n\n\n<div class=\"wp-block-image is-resized\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"583\" height=\"568\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Programmable-TOTP-token-Protectimus-Flex.jpg\" alt=\"Protectimus Flex programmable TOTP hardware token\" class=\"wp-image-7057\" srcset=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Programmable-TOTP-token-Protectimus-Flex.jpg 583w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Programmable-TOTP-token-Protectimus-Flex-300x292.jpg 300w\" sizes=\"auto, (max-width: 583px) 100vw, 583px\" \/><\/figure><\/div>\n\n\n<p>Codes are generated on a device with no network connection and no other software, so there is nothing on it for malware to infect. And once a key is written, it cannot be read back from the token, not even by the app that wrote it.<\/p>\n\n\n\n<p>Protectimus makes two programmable models that work the same way and differ only in shape. <a href=\"https:\/\/www.protectimus.com\/token\/slim\/\">Protectimus Slim NFC<\/a> is a card that fits in a wallet; Flex is a key fob that attaches to a key ring, which is harder to lose. The key fob version exists because customers asked for it: some were drilling holes in Slim NFC cards or making a <a href=\"https:\/\/www.facebook.com\/protectimusslimnfc\/photos\/a.1785075234844250\/1786269904724783\/\">custom case<\/a> for them. Flex also has a battery indicator, so you know when to plan a replacement. For more on the card version, see <a href=\"https:\/\/www.protectimus.com\/blog\/totp-tokens-protectimus-slim-nfc-faq\/\">this article<\/a>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"458\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-slim-nfc-token-in-a-hand-made-case.jpg\" alt=\"Protectimus Slim NFC token in a hand-made case\" class=\"wp-image-7070\" srcset=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-slim-nfc-token-in-a-hand-made-case.jpg 800w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-slim-nfc-token-in-a-hand-made-case-300x172.jpg 300w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-slim-nfc-token-in-a-hand-made-case-768x440.jpg 768w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-slim-nfc-token-in-a-hand-made-case-610x349.jpg 610w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">Which Services Work with Programmable Tokens<\/h2>\n\n\n\n<p>The rule is simple: if a service supports two-factor authentication with an <a href=\"https:\/\/www.protectimus.com\/blog\/10-most-popular-2fa-apps-on-google-play\/\">MFA app software token<\/a> and shows a QR code or a secret key during setup, a programmable token can usually replace the app. There is one technical limit to check: the secret key must be no longer than 32 characters in Base32.<\/p>\n\n\n\n<p>Services where Protectimus Flex and Slim NFC are already used include <a href=\"https:\/\/www.protectimus.com\/blog\/office-365-mfa-hardware-token\/\">Office 365<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/google-authenticator-backup\/\">Google<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/paypal-two-factor-authentication\/\">PayPal<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/twitter-two-factor-authentication\/\">X (Twitter)<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/how-to-protect-facebook-account-from-being-hacked\/\">Facebook<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/protectimus-slim-nfc-dropbox\/\">Dropbox<\/a>, <a href=\"https:\/\/www.protectimus.com\/blog\/protectimus-slim-nfc-github\/\">GitHub<\/a>, and <a href=\"https:\/\/www.protectimus.com\/blog\/protectimus-slim-nfc-coinbase\/\">Coinbase<\/a>, along with many payment systems and cryptocurrency exchanges.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"438\" height=\"498\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Protectimus-Flex-TOTP-token-secret-key-example.png\" alt=\"Example of a Base32 secret key no longer than 32 characters for a programmable TOTP token\" class=\"wp-image-7065\" srcset=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Protectimus-Flex-TOTP-token-secret-key-example.png 438w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/Protectimus-Flex-TOTP-token-secret-key-example-264x300.png 264w\" sizes=\"auto, (max-width: 438px) 100vw, 438px\" \/><\/figure><\/div>\n\n\n<h3 class=\"wp-block-heading\">Microsoft Entra ID Without P1\/P2<\/h3>\n\n\n\n<p>Microsoft Entra ID (Azure AD) deserves a separate mention. Classic OATH tokens are imported into Entra ID through a CSV file, and that requires an Entra ID P1 or P2 license. A programmable token skips that step: the user adds it in Security info as an authenticator app, which works without a premium license. The full scenario is described in the article on <a href=\"https:\/\/www.protectimus.com\/blog\/hardware-token-azure-mfa\/\">hardware tokens for Azure MFA<\/a>. The step-by-step setup is in the guide on <a href=\"https:\/\/www.protectimus.com\/guides\/entra-id-oath-hardware-tokens\/\">connecting hardware tokens to Microsoft Entra ID<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to Program the Token: Step by Step<\/h2>\n\n\n\n<p>The steps are the same for Protectimus Flex and Slim NFC. You need the token and an Android smartphone with NFC; programming from an iPhone is not supported.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Install Protectimus TOTP Burner<\/h3>\n\n\n\n<p>Install the free <a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.protectimus.totpburner.nfc&amp;hl=en\">TOTP Burner application<\/a> from Google Play on an NFC-enabled Android phone and make sure NFC is turned on in the phone settings.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Start Two-Factor Setup on the Service<\/h3>\n\n\n\n<p>Sign in to the account you want to protect, open its security settings, and start enabling two-factor authentication. When the service asks how you want to receive codes, choose the authenticator app option. Keep the page with the QR code open.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Write the Secret Key into the Token<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the TOTP Burner app.<\/li>\n\n\n\n<li>Tap &#8220;Burn the seed&#8221;.<\/li>\n\n\n\n<li>Tap &#8220;Scan the QR code&#8221; and scan the QR code shown by the service.<\/li>\n\n\n\n<li>Turn on the token and hold it against the phone&#8217;s NFC antenna.<\/li>\n\n\n\n<li>Tap &#8220;Continue&#8221;. When the app shows a confirmation message, the key is written.<\/li>\n<\/ol>\n\n\n\n<p>During this step the app also sets the token&#8217;s clock from the phone, which is what keeps the codes in sync with the service.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Confirm the Token on the Service<\/h3>\n\n\n\n<p>Go back to the service, press the button on the token, and enter the code it shows to complete setup. From now on, the token generates the codes for that account.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"770\" height=\"429\" src=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/how-to-program-protectimus-flex-otp-token.png\" alt=\"How to add a secret key to the Protectimus Flex token with TOTP Burner\" class=\"wp-image-7069\" srcset=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/how-to-program-protectimus-flex-otp-token.png 770w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/how-to-program-protectimus-flex-otp-token-300x167.png 300w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/how-to-program-protectimus-flex-otp-token-768x428.png 768w, https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/how-to-program-protectimus-flex-otp-token-610x340.png 610w\" sizes=\"auto, (max-width: 770px) 100vw, 770px\" \/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\">Common Issues<\/h2>\n\n\n\n<p>Most problems with programmable tokens come down to one of three things.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Service Rejects the Codes<\/h3>\n\n\n\n<p>This is usually a time problem. The token takes its time from the phone during programming, so if the phone&#8217;s clock was wrong, the token will be off by the same amount. Check that the phone uses automatic date and time, then write the key again. For background on why tokens drift and how services handle it, see the article on the <a href=\"https:\/\/www.protectimus.com\/blog\/time-drift-in-totp-hardware-tokens\/\">time drift problem<\/a>; the <a href=\"https:\/\/www.protectimus.com\/blog\/totp-algorithm-explained\/\">TOTP algorithm<\/a> article explains the time steps themselves.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Secret Key Does Not Fit or the Codes Never Match<\/h3>\n\n\n\n<p>Check the key length first: it must be 32 Base32 characters or fewer. Then check what the service generates. Flex and Slim NFC produce 6-digit codes with SHA-1 and a 30- or 60-second step, which is the default for most services. A service that uses SHA-256 or 8-digit codes will not accept them. Scanning a QR code from an older, abandoned setup attempt also gives a key the service no longer expects, so restart setup and scan the current one.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Phone Does Not Detect the Token<\/h3>\n\n\n\n<p>Make sure the token is turned on and NFC is enabled on the phone. The NFC antenna is usually in the upper part of the back of the phone, but its position varies by model, so move the token slowly across the back. A thick or metal phone case can block the signal; take it off for programming.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Can I program the token from an iPhone?<\/h3>\n\n\n\n<p>No. The Protectimus TOTP Burner app is available only for Android, and the phone must have NFC. One Android phone can be used to program any number of tokens.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Can one programmable token protect several accounts?<\/h3>\n\n\n\n<p>No. It holds one secret key at a time. To move it to another account, write a new key over the old one; the previous account then needs a new second factor.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Is it safe to program a token through a smartphone app?<\/h3>\n\n\n\n<p>The app only transfers the key to the token and does not store it. After programming, the key cannot be read back from the token. The token itself has no network connection, so it can&#8217;t be reached remotely.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Does the token need to be connected to anything after programming?<\/h3>\n\n\n\n<p>No. It works fully offline, generating codes from the stored key and its internal clock. Only the service you sign in to needs to be online.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How long does the battery last?<\/h3>\n\n\n\n<p>Protectimus Flex and Slim NFC are rated for 3 to 5 years of battery life. Flex also has a battery indicator, so you can see in advance when it is time to plan a replacement.<\/p>\n\n\n\n<p>The same steps work for any programmable model in the range of Protectimus <a href=\"https:\/\/www.protectimus.com\/tokens\/\">OATH hardware tokens<\/a>. Technical specifications and ordering details for the key fob version are on the <a href=\"https:\/\/www.protectimus.com\/token\/flex\/\">Protectimus Flex page<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Read more<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/totp-algorithm-explained\/\">TOTP Algorithm Explained<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/two-factor-authentication-types-and-methods\/\">The Pros and Cons of Different Two-Factor Authentication Types and Methods<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/2fa-security-flaws\/\">2FA Security Flaws You Should Know About<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/hardware-or-software-token-which-one-to-choose\/\">What Is a Hardware Token and How Does It Compare to Software Tokens?<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/two-factor-authentication-for-windows\/\">How Two-Factor Authentication for Windows Works<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/two-factor-authentication-solutions-comparison-google-authenticator-vs-protectimus\/\">Two-Factor Authentication Solutions Comparison: Google Authenticator vs. Protectimus<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/on-premise-2fa-vs-cloud-based-2fa\/\">On-Premise 2FA vs Cloud-Based Authentication<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/remote-work\/\">Remote Work: How to Transition Team to Working From Home During the COVID-19 Pandemic<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.protectimus.com\/blog\/vpn-two-factor-authentication\/\">Securing VPN with Two-Factor Authentication<\/a><\/li>\n<\/ul>\n<span class=\"et_bloom_bottom_trigger\"><\/span>","protected":false},"excerpt":{"rendered":"<p>To program a TOTP hardware token, you start two-factor setup on the service as if you were adding an authenticator app, then write the QR code&#8217;s secret key into the token instead. With Protectimus Flex or Slim NFC, the Protectimus TOTP Burner app on an NFC-enabled Android phone transfers the key and sets the token&#8217;s [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":7224,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[9],"tags":[16,12,120,10,194,1290,335,139,610,99],"class_list":["post-7055","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-protectimus-products","tag-2fa","tag-mfa","tag-multifactor-authentication","tag-otp","tag-protectimus-en","tag-protectimus-flex-en","tag-protectimus-slim-nfc-en","tag-tokens","tag-totp-en","tag-two-factor-authentication"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Anna\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Protectimus ltd\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"How to Program a TOTP Token via NFC (Protectimus Flex)\" \/>\n\t\t<meta property=\"og:description\" content=\"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t\t<meta property=\"article:section\" content=\"Protectimus Products\" \/>\n\t\t<meta property=\"article:tag\" content=\"2fa\" \/>\n\t\t<meta property=\"article:tag\" content=\"mfa\" \/>\n\t\t<meta property=\"article:tag\" content=\"multifactor authentication\" \/>\n\t\t<meta property=\"article:tag\" content=\"otp\" \/>\n\t\t<meta property=\"article:tag\" content=\"protectimus\" \/>\n\t\t<meta property=\"article:tag\" content=\"protectimus flex\" \/>\n\t\t<meta property=\"article:tag\" content=\"protectimus slim nfc\" \/>\n\t\t<meta property=\"article:tag\" content=\"tokens\" \/>\n\t\t<meta property=\"article:tag\" content=\"totp\" \/>\n\t\t<meta property=\"article:tag\" content=\"two-factor authentication\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-12-09T14:24:26+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-02T11:27:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/protectimus\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@protectimus\" \/>\n\t\t<meta name=\"twitter:title\" content=\"How to Program a TOTP Token via NFC (Protectimus Flex)\" \/>\n\t\t<meta name=\"twitter:description\" content=\"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@protectimus\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Anna\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#article\",\"name\":\"How to Program a TOTP Token via NFC (Protectimus Flex)\",\"headline\":\"How to Program a TOTP Token for Any Service\",\"author\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/author\\\/ann\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/protectimus-flex-totp-token-main.png\",\"width\":1920,\"height\":500,\"caption\":\"Proectimus MFA prices\"},\"datePublished\":\"2020-12-09T17:24:26+03:00\",\"dateModified\":\"2026-11-02T14:27:28+03:00\",\"inLanguage\":\"en-GB\",\"commentCount\":2,\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#webpage\"},\"articleSection\":\"Protectimus Products, 2FA, MFA, multifactor authentication, OTP, Protectimus, Protectimus Flex, Protectimus Slim NFC, tokens, totp, two-factor authentication, English\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/category\\\/protectimus-products\\\/#listItem\",\"name\":\"Protectimus Products\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/category\\\/protectimus-products\\\/#listItem\",\"position\":2,\"name\":\"Protectimus Products\",\"item\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/category\\\/protectimus-products\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#listItem\",\"name\":\"How to Program a TOTP Token for Any Service\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#listItem\",\"position\":3,\"name\":\"How to Program a TOTP Token for Any Service\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/category\\\/protectimus-products\\\/#listItem\",\"name\":\"Protectimus Products\"}}]},{\"@type\":\"FAQPage\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#aioseo-faq-page-mvz6bwcv\",\"name\":\"How to Program a TOTP Token for Any Service\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Can I program the token from an iPhone?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The Protectimus TOTP Burner app is available only for Android, and the phone must have NFC. One Android phone can be used to program any number of tokens.\"}},{\"@type\":\"Question\",\"name\":\"Can one programmable token protect several accounts?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. It holds one secret key at a time. To move it to another account, write a new key over the old one; the previous account then needs a new second factor.\"}},{\"@type\":\"Question\",\"name\":\"Is it safe to program a token through a smartphone app?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The app only transfers the key to the token and does not store it. After programming, the key cannot be read back from the token. The token itself has no network connection, so it can\\u2019t be reached remotely.\"}},{\"@type\":\"Question\",\"name\":\"Does the token need to be connected to anything after programming?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. It works fully offline, generating codes from the stored key and its internal clock. Only the service you sign in to needs to be online.\"}},{\"@type\":\"Question\",\"name\":\"How long does the battery last?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Protectimus Flex and Slim NFC are rated for 3 to 5 years of battery life. Flex also has a battery indicator, so you can see in advance when it is time to plan a replacement.\"}}],\"inLanguage\":\"en-GB\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#breadcrumblist\"}},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#organization\",\"name\":\"Protectimus\",\"description\":\"Blog Company\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/\",\"telephone\":\"+35319014565\",\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/protectimus\",\"https:\\\/\\\/twitter.com\\\/protectimus\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCwhXKBLAQfXca6bBWKjj27g\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/protectimus-solution-ltd\\\/mycompany\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/author\\\/ann\\\/#author\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/author\\\/ann\\\/\",\"name\":\"Anna\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/programmable-totp-token-protectimus-flex\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d39b4328d187c831d5ebe5986dd92c9abc337b45adca23fcab04e0a0d0e0adc?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Anna\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/\",\"name\":\"Protectimus Limited\",\"description\":\"Blog Company\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>How to Program a TOTP Token via NFC (Protectimus Flex)<\/title>\n\n","aioseo_head_json":{"title":"How to Program a TOTP Token via NFC (Protectimus Flex)","description":"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.","canonical_url":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#article","name":"How to Program a TOTP Token via NFC (Protectimus Flex)","headline":"How to Program a TOTP Token for Any Service","author":{"@id":"https:\/\/www.protectimus.com\/blog\/author\/ann\/#author"},"publisher":{"@id":"https:\/\/www.protectimus.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png","width":1920,"height":500,"caption":"Proectimus MFA prices"},"datePublished":"2020-12-09T17:24:26+03:00","dateModified":"2026-11-02T14:27:28+03:00","inLanguage":"en-GB","commentCount":2,"mainEntityOfPage":{"@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#webpage"},"isPartOf":{"@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#webpage"},"articleSection":"Protectimus Products, 2FA, MFA, multifactor authentication, OTP, Protectimus, Protectimus Flex, Protectimus Slim NFC, tokens, totp, two-factor authentication, English"},{"@type":"BreadcrumbList","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.protectimus.com\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/#listItem","name":"Protectimus Products"}},{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/#listItem","position":2,"name":"Protectimus Products","item":"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#listItem","name":"How to Program a TOTP Token for Any Service"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#listItem","position":3,"name":"How to Program a TOTP Token for Any Service","previousItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/#listItem","name":"Protectimus Products"}}]},{"@type":"FAQPage","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#aioseo-faq-page-mvz6bwcv","name":"How to Program a TOTP Token for Any Service","url":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/","mainEntity":[{"@type":"Question","name":"Can I program the token from an iPhone?","acceptedAnswer":{"@type":"Answer","text":"No. The Protectimus TOTP Burner app is available only for Android, and the phone must have NFC. One Android phone can be used to program any number of tokens."}},{"@type":"Question","name":"Can one programmable token protect several accounts?","acceptedAnswer":{"@type":"Answer","text":"No. It holds one secret key at a time. To move it to another account, write a new key over the old one; the previous account then needs a new second factor."}},{"@type":"Question","name":"Is it safe to program a token through a smartphone app?","acceptedAnswer":{"@type":"Answer","text":"The app only transfers the key to the token and does not store it. After programming, the key cannot be read back from the token. The token itself has no network connection, so it can\u2019t be reached remotely."}},{"@type":"Question","name":"Does the token need to be connected to anything after programming?","acceptedAnswer":{"@type":"Answer","text":"No. It works fully offline, generating codes from the stored key and its internal clock. Only the service you sign in to needs to be online."}},{"@type":"Question","name":"How long does the battery last?","acceptedAnswer":{"@type":"Answer","text":"Protectimus Flex and Slim NFC are rated for 3 to 5 years of battery life. Flex also has a battery indicator, so you can see in advance when it is time to plan a replacement."}},{"@type":"Question","name":"Can I program the token from an iPhone?","acceptedAnswer":{"@type":"Answer","text":"No. The Protectimus TOTP Burner app is available only for Android, and the phone must have NFC. One Android phone can be used to program any number of tokens."}},{"@type":"Question","name":"Can one programmable token protect several accounts?","acceptedAnswer":{"@type":"Answer","text":"No. It holds one secret key at a time. To move it to another account, write a new key over the old one; the previous account then needs a new second factor."}},{"@type":"Question","name":"Is it safe to program a token through a smartphone app?","acceptedAnswer":{"@type":"Answer","text":"The app only transfers the key to the token and does not store it. After programming, the key cannot be read back from the token. The token itself has no network connection, so it can\u2019t be reached remotely."}},{"@type":"Question","name":"Does the token need to be connected to anything after programming?","acceptedAnswer":{"@type":"Answer","text":"No. It works fully offline, generating codes from the stored key and its internal clock. Only the service you sign in to needs to be online."}},{"@type":"Question","name":"How long does the battery last?","acceptedAnswer":{"@type":"Answer","text":"Protectimus Flex and Slim NFC are rated for 3 to 5 years of battery life. Flex also has a battery indicator, so you can see in advance when it is time to plan a replacement."}}],"inLanguage":"en-GB","breadcrumb":{"@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#breadcrumblist"}},{"@type":"Organization","@id":"https:\/\/www.protectimus.com\/blog\/#organization","name":"Protectimus","description":"Blog Company","url":"https:\/\/www.protectimus.com\/blog\/","telephone":"+35319014565","sameAs":["https:\/\/www.facebook.com\/protectimus","https:\/\/twitter.com\/protectimus","https:\/\/www.youtube.com\/channel\/UCwhXKBLAQfXca6bBWKjj27g","https:\/\/www.linkedin.com\/company\/protectimus-solution-ltd\/mycompany\/"]},{"@type":"Person","@id":"https:\/\/www.protectimus.com\/blog\/author\/ann\/#author","url":"https:\/\/www.protectimus.com\/blog\/author\/ann\/","name":"Anna","image":{"@type":"ImageObject","@id":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/9d39b4328d187c831d5ebe5986dd92c9abc337b45adca23fcab04e0a0d0e0adc?s=96&d=mm&r=g","width":96,"height":96,"caption":"Anna"}},{"@type":"WebSite","@id":"https:\/\/www.protectimus.com\/blog\/#website","url":"https:\/\/www.protectimus.com\/blog\/","name":"Protectimus Limited","description":"Blog Company","inLanguage":"en-GB","publisher":{"@id":"https:\/\/www.protectimus.com\/blog\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Protectimus ltd","og:type":"article","og:title":"How to Program a TOTP Token via NFC (Protectimus Flex)","og:description":"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.","og:url":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/","og:image":"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png","og:image:secure_url":"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png","og:image:width":"1920","og:image:height":"500","article:section":"Protectimus Products","article:tag":["2fa","mfa","multifactor authentication","otp","protectimus","protectimus flex","protectimus slim nfc","tokens","totp","two-factor authentication"],"article:published_time":"2020-12-09T14:24:26+00:00","article:modified_time":"2026-11-02T11:27:28+00:00","article:publisher":"https:\/\/www.facebook.com\/protectimus","twitter:card":"summary","twitter:site":"@protectimus","twitter:title":"How to Program a TOTP Token via NFC (Protectimus Flex)","twitter:description":"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.","twitter:creator":"@protectimus","twitter:image":"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png","twitter:label1":"Written by","twitter:data1":"Anna","twitter:label2":"Est. reading time","twitter:data2":"7 minutes"},"aioseo_meta_data":{"post_id":"7055","title":"How to Program a TOTP Token via NFC (Protectimus Flex)","description":"How to program a TOTP hardware token via NFC, which services support programmable tokens, and how to set up Protectimus Flex step by step.","keywords":null,"keyphrases":{"focus":{"keyphrase":"programmable TOTP token"},"additional":[]},"primary_term":{"category":9},"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"featured","og_image_url":"https:\/\/www.protectimus.com\/blog\/wp-content\/uploads\/2020\/12\/protectimus-flex-totp-token-main.png","og_image_width":"1920","og_image_height":"500","og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":"Protectimus Products","og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[{"id":"#aioseo-faq-page-mvz6bwcv","slug":"faq-page","graphName":"FAQPage","label":"FAQ","properties":{"name":"#post_title","description":"","questions":[{"question":"Can I program the token from an iPhone?","answer":"No. The Protectimus TOTP Burner app is available only for Android, and the phone must have NFC. One Android phone can be used to program any number of tokens."},{"question":"Can one programmable token protect several accounts?","answer":"No. It holds one secret key at a time. To move it to another account, write a new key over the old one; the previous account then needs a new second factor."},{"question":"Is it safe to program a token through a smartphone app?","answer":"The app only transfers the key to the token and does not store it. After programming, the key cannot be read back from the token. The token itself has no network connection, so it can\u2019t be reached remotely."},{"question":"Does the token need to be connected to anything after programming?","answer":"No. It works fully offline, generating codes from the stored key and its internal clock. Only the service you sign in to needs to be online."},{"question":"How long does the battery last?","answer":"Protectimus Flex and Slim NFC are rated for 3 to 5 years of battery life. Flex also has a battery indicator, so you can see in advance when it is time to plan a replacement."}]},"value":"faq-page"}],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-11-02 11:28:00","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2022-09-01 13:49:20","updated":"2026-11-14 18:06:31","focus_keyword":"programmable TOTP token","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.protectimus.com\/blog\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/\" title=\"Protectimus Products\">Protectimus Products<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tHow to Program a TOTP Token for Any Service\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.protectimus.com\/blog\/"},{"label":"Protectimus Products","link":"https:\/\/www.protectimus.com\/blog\/category\/protectimus-products\/"},{"label":"How to Program a TOTP Token for Any Service","link":"https:\/\/www.protectimus.com\/blog\/programmable-totp-token-protectimus-flex\/"}],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/comments?post=7055"}],"version-history":[{"count":23,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7055\/revisions"}],"predecessor-version":[{"id":9450,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/7055\/revisions\/9450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media\/7224"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media?parent=7055"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/categories?post=7055"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/tags?post=7055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}