Smartphone security authentication and mobile access

Best Mobile CAC Readers for iPhone & Android That Actually Work (2025)

CAC Mobile Readers: Best iPhone & Android Card Readers for DoD Email

Accessing military email and DoD portals from your iPhone or Android device requires a mobile CAC (Common Access Card) reader. While most military personnel use computers for CAC access, mobile readers provide critical flexibility for deployed personnel, remote workers, and emergency situations when computer access isn’t available.

This guide covers the best mobile CAC readers for iOS and Android devices in 2025, including compatibility requirements, setup instructions, and real-world usage limitations you need to know before purchasing.

Understanding Mobile CAC Limitations

Important Reality Check: Mobile CAC access is significantly more limited than computer access. Before investing in a mobile reader, understand these constraints:

  • Limited Website Compatibility: Many DoD websites don’t support mobile certificate authentication
  • Browser Restrictions: Only specific mobile browsers work with CAC readers
  • App Limitations: Most military apps don’t support external CAC readers
  • OWA Access Only: Primary use case is Outlook Web Access (OWA) email
  • No NIPRNET/SIPRNET: Mobile readers cannot access classified networks

Mobile CAC readers are best suited for checking email, accessing basic personnel portals, and emergency communication – not as a primary CAC access method.

iPhone CAC Readers (Lightning Connector)

#1: Thursby PKard Reader for iOS

Most Reliable Option | MFi Certified | $99

The Thursby PKard Reader is the gold standard for iPhone CAC access, specifically designed for DoD use with Apple MFi (Made for iPhone) certification.

Key Features:

  • Lightning connector (works with iPhone 5 through iPhone 14)
  • Plug-and-play with Thursby’s free PKard Reader app
  • Works with OWA, MyPay, milConnect, and supported DoD sites
  • No battery required (powered by iPhone)
  • Compact design with keychain attachment
  • Officially tested with DoD systems

Compatible Devices:

  • iPhone 14, 13, 12, 11, X, XR, XS series
  • iPhone 8, 7, 6, 5 series (with Lightning connector)
  • iPad Pro, iPad Air, iPad Mini (Lightning models)

What You Can Access:

  • ✓ Outlook Web Access (OWA) email
  • ✓ MyPay and military pay systems
  • ✓ milConnect personnel portal
  • ✓ Basic DoD PKI-enabled websites
  • ✗ Most mobile apps (apps don’t support external readers)
  • ✗ Classified systems (SIPR/NIPR)

Where to Buy: Purchase directly from Thursby Software Systems (thursby.com) – not available on Amazon. Price: $99 + shipping.

Setup Process:

  1. Download free “PKard Reader” app from Apple App Store
  2. Install DoD root certificates in iOS (download from cyber.mil)
  3. Connect PKard Reader to Lightning port
  4. Insert CAC card (gold chip facing screen)
  5. Open Safari and navigate to webmail.apps.mil (OWA)
  6. Enter PIN when prompted

Alternative: Identiv uTrust Token for iOS

Another reputable option at similar price point ($89-99). Features and functionality nearly identical to Thursby PKard. Choose based on availability and current pricing.

Android CAC Readers (USB-C Connector)

Android offers more flexibility than iOS due to USB-C’s universal nature. Any USB-C CAC reader that works with computers should technically work with Android devices – but software support is the challenge.

#1: Standard USB-C CAC Readers for Android

Budget-Friendly | Universal Compatibility | $10-25

The same USB-C CAC readers used for laptops work with modern Android phones and tablets. This is more cost-effective than buying a specialized mobile reader.

Recommended USB-C Readers for Android:

Option 1: Foldable USB-C CAC Reader (Portable)

  • Ultra-compact, keychain-portable design
  • USB-C native (no adapter needed)
  • Works with Samsung Galaxy, Google Pixel, OnePlus, etc.
  • Price: $10-15

Option 2: 5-in-1 USB-C Multi-Reader

  • Reads CAC + SIM/SD/TF cards
  • Includes USB-A adapter for older devices
  • Foldable, portable design
  • Price: $12-18

Compatible Android Devices:

  • Samsung Galaxy S21, S22, S23, S24 series
  • Google Pixel 6, 7, 8 series
  • OnePlus 9, 10, 11 series
  • Any Android phone/tablet with USB-C port and OTG support

Required Android Features:

Your Android device MUST support:

  • USB OTG (On-The-Go): Allows external USB devices
  • Android 8.0 or newer: Older versions lack certificate support
  • Chrome browser: Most reliable for CAC authentication

Check OTG support: Download “USB OTG Checker” app from Google Play.

Android CAC Setup Process

Step 1: Install DoD Root Certificates

  1. Download DoD root certificates from public.cyber.mil/pki-pke
  2. Transfer .p7b certificate files to your Android device
  3. Open Settings → Security → Encryption & Credentials → Install from storage
  4. Select each .p7b file and install
  5. Name certificates clearly (e.g., “DoD Root CA”)

Step 2: Connect CAC Reader

  1. Connect USB-C CAC reader to phone’s USB-C port
  2. Insert CAC card (gold chip facing screen)
  3. You may see “USB device connected” notification

Step 3: Access OWA Email

  1. Open Chrome browser (not Samsung Internet or other browsers)
  2. Navigate to webmail.apps.mil
  3. Chrome should prompt for certificate selection
  4. Select your CAC certificate
  5. Enter CAC PIN when prompted
  6. Bookmark for future access

Troubleshooting Mobile CAC Issues

iPhone: “Certificate Not Trusted”

Solution: Install DoD root certificates in iOS:

  1. Download certificates from cyber.mil on your iPhone
  2. Open the .cer files – iOS will prompt to install profile
  3. Go to Settings → General → About → Certificate Trust Settings
  4. Enable trust for DoD root certificates

Android: Reader Not Detected

Solution: Check USB OTG support:

  • Install “USB OTG Checker” app from Google Play
  • Verify your device supports OTG
  • Try a different USB-C cable or adapter
  • Reboot phone with reader connected

Both: Website Won’t Accept CAC

Reality: Many DoD websites simply don’t support mobile certificate authentication. This is a DoD system limitation, not a reader problem. OWA is the most reliable mobile CAC use case.

Mobile CAC Alternatives

Option 1: Mobile Email Apps (No CAC Needed)

Many organizations configure mobile email profiles that don’t require CAC readers:

  • iOS Mail App: Configure with Exchange ActiveSync profile
  • Nine Email App: Popular third-party option for military email
  • Outlook Mobile: Works with some DoD email systems

Check with your organization’s IT help desk for mobile email profiles. This eliminates the need for a CAC reader entirely.

Option 2: Remote Desktop Solutions

Use your mobile device to remote desktop into a CAC-enabled computer:

  • Microsoft Remote Desktop: Access your office computer from phone
  • VDI Solutions: Many organizations provide virtual desktop infrastructure
  • Citrix Receiver: Common in DoD environments

What About iPhone 15 and USB-C?

iPhone 15 and iPhone 15 Pro (released September 2023) switched from Lightning to USB-C. This is great news for CAC users:

  • Universal Readers: Any USB-C CAC reader works with iPhone 15
  • Cost Savings: Use same reader for laptop and phone ($10-25 vs $99)
  • More Options: No longer locked to Lightning-specific readers

iPhone 15 CAC Setup: Follow the Android instructions above – iPhone 15 with USB-C works identically to Android for CAC readers.

Mobile CAC Reader Comparison

Reader Type Devices Price Ease of Use Reliability
Thursby PKard (Lightning) iPhone 5-14, iPad $99 Excellent Very High
USB-C Reader (Android) Most Android phones $10-25 Moderate High
USB-C Reader (iPhone 15) iPhone 15+ only $10-25 Moderate High

Real-World Use Cases

When Mobile CAC Readers Are Worth It:

  • Deployed personnel with limited computer access
  • Emergency email access when traveling
  • Quick MyPay/LES checks on the go
  • Backup option when primary computer fails

When They’re NOT Worth It:

  • Daily primary email access (use computer instead)
  • App-based access (most apps don’t support external readers)
  • Extensive portal navigation (mobile browser experience is poor)
  • If your organization provides mobile email profiles (use those)

Security Considerations

  • PIN Protection: Always lock your phone – CAC + phone = your identity
  • Public WiFi: Avoid CAC access on public/unsecured networks
  • Lost Reader: Report immediately – treat like lost CAC
  • Certificate Storage: Mobile devices store certificates – secure your phone

Frequently Asked Questions

Can I use mobile CAC readers for Signal or WhatsApp?

No. Encrypted messaging apps do not integrate with external CAC readers. They use their own encryption keys.

Will mobile CAC readers work with milConnect app?

Generally no. Most mobile apps don’t support external card readers. You need to use the mobile browser (Safari or Chrome) to access the milConnect website.

Do I need ActivClient on my phone?

No. ActivClient is Windows software. Mobile devices use built-in certificate management.

Can I access SIPR email on my phone with a CAC reader?

Absolutely not. SIPR/classified systems cannot be accessed from personal mobile devices under any circumstances.

Why doesn’t my CAC reader work with the Army’s AKO app?

Mobile apps generally don’t support external CAC readers. Use the browser version of AKO instead (ako.army.mil in Safari/Chrome).

Recommendations by Device

iPhone 14 and older (Lightning): Thursby PKard Reader ($99) – only reliable Lightning option

iPhone 15 (USB-C): Foldable USB-C CAC Reader ($10-15) – save money with universal reader

Android (USB-C): 5-in-1 USB-C Multi-Reader ($12-18) – versatile, works with laptop too

iPad Pro (USB-C): Any USB-C reader – same as Android recommendations

Budget Option: Check if your organization provides mobile email profiles first – may not need reader at all

Bottom Line

Mobile CAC readers provide convenient access to military email and basic portals, but they’re not a replacement for computer-based CAC access. If you primarily need email, check whether your organization offers mobile email profiles that don’t require a CAC reader.

For iPhone users on 14 and older, the $99 Thursby PKard is your only proven option. iPhone 15 and Android users can save money using standard USB-C CAC readers ($10-25) that also work with their laptops.

Related Guides:

Contains affiliate links. As an Amazon Associate, we earn from qualifying purchases at no cost to you.

Robert Chen

Robert Chen is a cybersecurity specialist and former DoD IT systems administrator with 12 years of experience managing CAC infrastructure and secure military networks. He holds CompTIA Security+, CISSP, and CAC/PKI certifications. Robert has helped thousands of service members and DoD civilians troubleshoot CAC access issues and set up secure home workstations for remote military email and systems access. Based in Northern Virginia, he specializes in helping military families navigate the technical challenges of CAC card usage at home.

More From Author

Digital security lock and protection concept

DoD Safe Not Working With Your CAC? Here’s What Actually Fixed It

CAC card renewal and expiration management process

CAC Certificate Expired? Here’s When to Renew vs Replace Your Card

Leave a Reply

Your email address will not be published. Required fields are marked *