Quote from teun:
Indeed. It's not likely that the device stops within a few years. These devices are typically registered (with the 'security supplier' like AES) for few years, after that time you'll probably receive a new one automatically.
But when you close your account you have to send it back. That's a drawback in my opinion (I'm not living in US).
IB is not crystal crear about these devices, for instance it is not known which device will be sent to which account holder (there seem to be no clear rules, only internal probably), and when. Also, there is little info about the passcode card.
But, it's a good development. It was 1 of my few complaints (to IB) previously that the account was only protected bij a password of max. 8 characters.