Techniques disclosed herein are generally directed toward providing at least one security feature for an FTM session. More specifically, an initiating STA can include a security feature in an initial FTM request (iFTMR), determine whether a received FTM frame contains information responsive to the at least one security feature, and complete the FTM session accordingly (including terminating the FTM session if the FTM frame does not contain correct information responsive to the at least one security feature). Embodiments may include a security feature such as nonce values and/or generated (or partially-generated) media access control (MAC) addresses.