I'm divided. Smartphones will probably always be much less secure than specially designed one time password provider hardware. On the other hand your smartphon

I'm divided. Smartphones will probably always be much less secure than specially designed one time password provider hardware. On the other hand your smartphone can get more secure with updates and your token provider will surely be much harder if at all possible to upgrade. Anyway the point is moot, if such a scheme is ever viable (as in most people will have one and you can implement it in many websites without having to be a bank) it will be through smartphones.