Although soft tokens may be more convenient, critics indicate that the tamper-resistant property of hard tokens is unmatched in soft token implementations,[REF] which could allow seed record secret keys to be duplicated and user impersonation to occur.
Clock drift also affects some tokens (especially infrequently used ones), requiring time-consuming server-side re-sync with the provider.