What auto token is and why your bank uses it
Auto token is a security feature that automatically generates one-time codes on your bank's hardware device or app—usually a small keypad or fob—without you having to request them. Bank of America's BO6 is one version of this. The codes change every 30 to 60 seconds and are tied to your account, so they're harder to steal than a static password.
Your bank may have enrolled you in auto token automatically when you set up online banking, or you may have chosen it yourself. The system works by pushing new codes to your device on a schedule, rather than waiting for you to ask for one when you log in. This is different from on-demand tokens, where you request a code each time you need it.
Auto token is secure, but it's also inconvenient if you don't log in often, because the codes expire whether you use them or not. If you prefer to request codes only when you actually need them, or if you want to use a different authentication method altogether, you can turn it off.
Key Takeaways
- Auto token generates security codes automatically on a schedule; turning it off means codes will only appear when you request them or you'll use a different login method.
- You can disable auto token through your bank's online banking settings, usually under security or authentication preferences.
- Bank of America customers can also call their customer service line to have auto token turned off by a representative.
- Turning off auto token does not delete your device or account—it simply stops the automatic code generation.
- Your bank may require you to use a replacement authentication method, such as a one-time code sent by text or email, before you can disable auto token entirely.
Disabling auto token through online banking
Log into your bank's online banking portal using your current credentials. Navigate to the security settings or authentication settings section—this is often labeled "Security," "Account Security," "Preferences," or "Connected Devices," depending on your bank's interface.
Look for a section labeled "Tokens," "Token Devices," "Security Devices," or "Authentication Methods." You should see your BO6 device listed by name or serial number. Select it and look for an option to disable, turn off, or remove auto token. Some banks offer a toggle switch; others require you to click a "Disable" or "Remove" button.
Before you can complete the action, your bank will likely ask you to confirm a replacement authentication method. This might be a text message code, an email code, a backup phone number, or a security question. Choose the method you want to use for future logins and confirm it. Then complete the removal of auto token.
After you disable auto token, log out and log back in to confirm the change took effect. Your next login should use the new authentication method you selected, not the BO6 device.
Turning off auto token by phone
If you cannot access your online banking account or prefer to speak with someone directly, call your bank's customer service number. For Bank of America, this is typically the number on the back of your debit or credit card, or you can find it on their website.
Tell the representative that you want to disable auto token on your BO6 device. They will verify your identity by asking security questions or requesting information from your account. Once verified, they can disable auto token in their system.
The representative will also ask what authentication method you want to use instead—usually a text message code or email code. Confirm your phone number or email address on file before they complete the change. Ask them to send you a confirmation email or note the reference number they provide.
What happens after you turn off auto token
Your BO6 device will stop generating new codes automatically. If you had codes already displayed on the screen, they will expire at their normal time and will not be replaced. The device itself is not deleted or erased—it simply stops its automatic function.
The next time you log into online banking, you will be prompted to use your new authentication method instead. This might be a code sent to your phone by text, a code sent to your email, or a security question, depending on what you and your bank agreed to.
If you ever want to re-enable auto token in the future, you can do so through the same security settings menu or by calling customer service again. Your BO6 device can be reactivated without needing to order a new one.
If you still need the BO6 device for other purposes
Disabling auto token does not mean you have to stop using your BO6 device entirely. Some banks allow you to switch it to on-demand mode, where the device only generates a code when you press a button or request one through your online banking portal.
If your bank offers on-demand mode, you can select this option instead of disabling the device completely. This keeps the device active and useful for situations where you might need a hardware-generated code, but removes the inconvenience of codes expiring unused.
Ask your bank's customer service whether on-demand mode is available for your account. If it is, they can switch you to that mode instead of removing auto token entirely.
Troubleshooting if the change does not take effect
If you disabled auto token through online banking but your BO6 device is still generating codes, or if you are still being asked for a token code at login, clear your browser's cache and cookies, then log out completely and log back in. Sometimes the system needs a fresh session to recognize the change.
If the problem persists after clearing your cache, call customer service and confirm that the change was saved in their system. It is possible the request did not go through, or there was a delay in the system updating. A representative can verify the status and manually complete the change if needed.
If you disabled auto token by phone but are still seeing token prompts, ask the representative to check whether the change has been applied to your account. Some banks have a delay of a few hours or up to one business day before the change appears in the online banking system.
Frequently Asked Questions
Will turning off auto token affect my other bank accounts or cards?
No. Auto token is tied to your online banking login, not to individual cards or accounts. Disabling it will affect only the way you log into online banking. All your accounts and cards will remain active and usable.
Can I turn off auto token if I do not have access to my BO6 device right now?
Yes. You do not need the physical device to disable auto token. You can do it through online banking settings or by calling customer service. The device itself is not required to make the change.
What if my bank says I cannot disable auto token?
Some banks require hardware token authentication for certain account types or transaction levels. If your bank will not let you disable it, ask whether you can switch to on-demand mode instead, or ask what other authentication methods are available for your account type.
Do I need to do anything with the BO6 device after I turn off auto token?
No. You can keep it, throw it away, or store it. If you re-enable auto token later, the same device can be reactivated. You do not need to return it to the bank unless they specifically ask you to.
How long does it take for auto token to be disabled?
If you disable it through online banking, the change usually takes effect immediately or within a few minutes. If you disable it by phone, it may take a few hours or up to one business day to appear in the online banking system, though your next login should use the new method right away.