Buy an e-signature token

An e-signature token is a USB device used to create, protect, and use the private key for a qualified electronic signature. This category is not about cryptocurrency tokens. It contains SecureToken devices for Ukrainian electronic reporting, document workflows, user authentication, and other operations that require a protected signing key.

Ukraine’s current term is qualified electronic signature, commonly abbreviated as KEP in Ukrainian. The older term EDS is still found in searches and legacy documentation. The USB device is sold without a personal signing certificate: the key and certificate are issued or recorded through a qualified electronic trust service provider chosen by the user.

How a hardware signing token works

The private signing key remains inside the protected device instead of being handled as a regular file that can be copied from a computer or sent by email. Compatible software passes data to the token and receives the result of the cryptographic operation without exporting the private key to the computer.

Access is protected by a password or PIN, and failed attempts are limited. If a token is lost or may have been compromised, contact the trust service provider to revoke the certificate and issue a replacement. Buying another token does not automatically revoke the previous certificate.

Where e-signature tokens are used

Hardware signing tokens are used by sole proprietors, accountants, company officers, legal teams, public bodies, and other organisations operating in Ukraine. Qualified signatures can be used for tax and financial reporting, contracts, acceptance certificates, electronic document management, business banking, public registers, and procurement platforms.

A token may work with the Ukrainian Electronic Taxpayer Cabinet, M.E.Doc, SOTA, Vchasno, and other systems when they support the specific device, cryptographic module, and certificate issued by the user’s provider. Before ordering, confirm compatibility with the trust service provider, bank, or software support team responsible for your workflow.

SecureToken-338M or SecureToken-338S

Lwallet carries two models made in Ukraine by AVTOR. Both use USB-A and Infineon SLE78-family smart chips rated Common Criteria EAL6+. They support Windows, Linux, macOS, and Android when the required drivers and compatible cryptographic software are available. The main difference is the enclosure:

• SecureToken-338M has a plastic enclosure. It is the more affordable option for office use and occasional signing.
• SecureToken-338S has a metal enclosure. It is better suited to everyday use, frequent connection, and transport.

The two models have similar cryptographic capabilities, so the choice mainly comes down to enclosure durability, working conditions, and budget.

What to check before ordering

• Whether your electronic trust service provider can issue or record a key on SecureToken-338M or SecureToken-338S.
• Whether the token is supported by the bank, accounting application, or document management system you use.
• Whether the required drivers and cryptographic software are available for your operating system.
• How many people will sign documents. Do not share one personal signing key among several users; arrange a separate key and certificate for each signatory.

If you are replacing a lost or locked token, ask the provider how to revoke the old certificate and issue a new one before resuming work.

Buy an e-signature token in Ukraine

Lwallet supplies SecureToken-338M and SecureToken-338S with a 12-month warranty. We can help compare the models and check basic operating-system requirements, but final compatibility with a trust service provider, bank, or specialised platform must be confirmed with the organisation responsible for that service.

Visit our showroom at 3 Bilasa Street in Lviv or use local pickup in Kyiv. We deliver throughout Ukraine and internationally. Order online, call +38 (096) 199-55-55, or message our team in the website chat.