stoken

RSA SecurID-compatible software token for Linux/UNIX systems.

Runs as stoken|macOS, Linux, Windows|github.com

Command form

ai-draft · 3 tasks · 6 fields

Show an RSA SecurID-compatible tokencode or import a token into ~/.stokenrc. PIN and password prompts stay interactive; export, show and issue are left out.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui stoken

`stoken tokencode`

Show tokencode

Print the current or next tokencode of the imported token.

Show tokencodeExample values, fixed in this page — nothing here reaches a terminal

TasksEach one presets the form for one job

Current tokencode

Next tokencode

next

ParametersOnly these flags are editable in the form

Next tokencode

Generate the next tokencode instead of the current one.
boolean

--next

Read password or PIN from stdin

boolean

--stdin-s

Ignore token expiration

boolean

--force-f

`stoken import`

Import token

Decode a token string or sdtid file and write it to ~/.stokenrc. Token strings are secrets; prefer a file.

Import tokenExample values, fixed in this page — nothing here reaches a terminal

Basic

Token file (sdtid)*

file

Overwrite existing token

--force

TasksEach one presets the form for one job

Import from file

fileforce

ParametersOnly these flags are editable in the form

Token file (sdtid)

path

--file

Token string

Appears in shell history; prefer a file.
string

--token

Overwrite existing token

boolean

--force

SourcesEvery flag above is checked against these

manual

stoken [tokencode] [--stdin] [--force] [--next] [opts] stoken tokencode --next --next Generate the next tokencode instead of the current tokencode. For a 60-second --stdin, -s read the password or PIN as single line from standard input. --force, -f Override token expiration date checks (for tokencode) or token

manual2026-10-27

github.com

manual

stoken import {--file=file | --token=token_string} [--force] [opts] stoken import --file mytoken.sdtid By default, stoken import will refuse to overwrite an existing token in ~/.stokenrc. The --force switch overrides this check.

manual2026-10-27

github.com

Before it fills your prompt, Otty checks the installed stoken against its version. A form that does not match your version is not offered.