Security token where possession alone grants access. Anyone holding the token can use it. Must be protected in transit and storage.