No, we don't have any hardware-based tokens. Our software tokens communicate with the WiKID Strong Authentication server over the internet, so they require an internet connection of some kind - at least for the initial validation process.
The software token can be run on USB drive - and that drive can, of course, be encrypted.