I was going to say...the physical token is a Citrix key similar to the one i use for work so unless they can physically obtain my serial number from it im sure im safe....I heard those with software/app tokens getting hacked but thats about it