RSA SecurID review

RSA SecurID is an identity security suite for organizations that need to manage authentication and access across cloud, hybrid, and on-premises environments. RSA’s product information describes tools for workforce authentication, access, and identity governance; it is broader than a physical token alone.

RSA ID Plus is the named access offering. Its listed capabilities include multifactor and passwordless authentication, single sign-on, and directory services. The product information also describes governance and access controls for users, devices, and non-human identities. Authentication options include FIDO2, biometrics, hardware tokens, and other methods.

According to the pricing information checked November 7, 2026, listed ID Plus plans start at $3 per user per month for Cloud IAM (C1). Hybrid plans are listed at $5 and $7 per user per month, while the E3 price is not published. A 45-day free trial is listed; a free plan is not.

RSA’s clearest strength is breadth: the product information covers authentication, workforce access, directory services, and identity governance in one suite. That may suit regulated organizations that need to manage access across a mix of cloud, hybrid, and on-premises systems, rather than add a standalone authenticator for each case.

• Authentication choices include FIDO2, biometrics, hardware tokens, and other methods. That gives teams options for users or sites where phones or USB devices are restricted, though the sources do not specify which methods work in every deployment.
• RSA ID Plus includes SSO and directory services, alongside MFA. Its governance capabilities address access policies across users, devices, and non-human identities.
• The listed entry price is relatively easy to assess: C1 is $3 per user per month, E1 is $5, M1 is $6, and E2 is $7. M1 lists Help Desk Live Verify; E2 lists that feature plus Adaptive Access. All four list a 45-day trial.

That plan ladder gives buyers a starting point for comparing needs, even if it does not settle the full cost. In one Reddit discussion, administrators weighed RSA tokens against smart cards and phone-based options when devices were restricted; that reflects a real deployment consideration, not a universal endorsement.

The published pricing leaves important budget questions open. Seat and usage limits are not published for the listed plans, annual-billing rates are not published, and overage costs are not published. E3 includes RSA Risk AI, RSA Mobile Lock, Adaptive Access, and Premium Support in the published plan details, but its per-user price is not published. That makes a full cost comparison difficult from the available information.

Extras also complicate the headline rate. Help Desk Live Verify and Adaptive Access are not included with C1 or E1, and the add-on list includes Passwordless, Premium Support, hardware appliances, telephony credits, and identity governance. Buyers should confirm which capabilities are included in their quote rather than assume the entry plan covers the whole deployment.

RSA is also a poor fit for someone seeking a personal token: one Reddit thread about personal use described the cost as impractical for hobby accounts. That is one user’s view, not a price comparison. Other Reddit discussions mention Duo and smart cards as alternatives, especially where phone or USB use is restricted. The sources do not establish that either is cheaper or easier to deploy.

The listed monthly rates start at $3 per user for Cloud IAM (ID Plus C1). Hybrid authentication (E1) is $5, Entra ID Enhanced (M1) is $6, and Hybrid IAM (E2) is $7 per user. E3 is also listed, but its price is not published. Moving from C1 to E1 adds $2 per user monthly; E2 costs $2 more than E1 and includes Adaptive Access and Help Desk Live Verify. Those two features are not included with C1 or E1.

All listed prices are monthly. Annual-billing rates, seat limits and usage limits are not published, so the entry price doesn’t tell you what a full deployment will cost. RSA lists a 45-day free trial. Add-ons include Passwordless, Premium Support, RSA Risk AI, hardware tokens and Identity Governance; add-on prices and overage costs are not published. Get a quote that spells out required add-ons and expected usage before comparing the headline rates with another provider.

The published product information doesn’t document migration tools, data-export options or the effort involved in moving users and policies. Before switching in, map your directories, applications, authentication methods and access rules, then confirm how RSA will handle each. This matters if you need to keep hardware tokens, passwordless methods or a mix of cloud, hybrid and on-premises access; RSA lists support for those environments and methods, but the details of transferring existing enrollments aren’t published here.

Before switching out, ask what identity, policy and audit data you can export, in what format, and whether existing tokens can be reused. Plan for user re-enrollment if credentials can’t transfer, but confirm that with RSA rather than assuming. Seat and usage limits are also unpublished, so validate those before a rollout. The published published material includes no Reddit posts or comments, so we can’t substantiate specific reasons users leave RSA or describe a reported migration experience.