Hard tokens (Hardware token = Hard Token) are physical devices used to gain access to an electronically restricted resource. Soft tokens (Software token = Soft token) are just that; authentication tokens that are not physically tangible, but exist as software on common devices (for example computers or phones).