Abstract: Systems and methods are provided for pre-provisioning a first device with a token. The token on the first device may be linked to any real credential using an application on a second device. Because the token may be maintained using the second device, the first device may be a “dumb” device while the second device is a “smart” device. The real credential may be changed and updated on the second device, such that the same token is linked to different real credentials at different times. An identifier may be assigned to the first device and stored in association with its provisioned token in a token vault. The identifier may be used by a user to register and activate the token with the application on the second device.