Token

nouncandidate·updated May 9, 2026

Something that the claimant possesses and controls (such as a key or password) that is used to authenticate a claim. See also Cryptographic Token.

Framework senses

6 senses across 5 frameworks

ISACA Cybersecurity Glossary1 senseview framework →

§1: A device that is used to authenticate a user, typically in addition to a username and password Scope Note: A token is usually a device the size of a credit card that displays a pseudo random number that changes every few minutes.

Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →

§1: A small device with an embedded computer chip that can be used to store and transmit electronic information. A soft token is a software-based token.

NISTIR 7298: Glossary of Key Information Security Terms, Revision 22 sensesview framework →

§1: Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.
§2 · sense_2_pending_review: Something that the claimant possesses and controls (such as a key or password) that is used to authenticate a claim. See also Cryptographic Token.

CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →

§1: Something that the claimant possesses and controls (such as a key or password) that is used to authenticate a claim. See also Cryptographic Token.

NIST SP 800-631 senseview framework →

§1: Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.