[masraum]

Originally Posted by MBAtarga

That device was likely an RSA Hard Token - which is used for MFA.
Yubikeys are another current MFA option.

I'm in a Security group at a large telecom/mobile provider.
We were recently forced to update passwords to a 15 char minimum!

Yep, RSA hard token. Now we use RSA soft token on personal cell phone.

Yes, my corp updated from 8 char min to 16 char min (which is actually a huge step forward WRT security). At the same time as the change from 8 --> 16, the required complexity was reduced. The other good news is that when it was 8 char, it had to be changed quarterly. Now that it's 16 char, it's also good for a year..