Token2 Molto Configurator

TOKEN2

About this app

Token2 Molto Configurator programs Token2 Molto hardware TOTP tokens directly from your phone — no computer, no card reader, no vendor software.

Molto tokens are programmable hardware authenticator devices from Token2 (Switzerland). Each one holds many time-based one-time-password (TOTP) accounts at once, so a single token can replace an authenticator app across all your logins — with the secrets kept on a dedicated device that never connects to the internet.

SUPPORTED TOKENS
- Molto2 — connects over USB (USB-C / OTG), holds up to 100 profiles
- Molto1 — programmed contactlessly over NFC, holds up to 10 profiles

WHAT YOU CAN DO
- Scan the QR code shown during 2FA setup, or paste a secret / otpauth link
- Program a profile with a live verification code so you can confirm the token matches before you rely on it
- Bulk-import many accounts at once from Aegis (plaintext or encrypted), 2FAS, Google Authenticator export QR codes, or a list of otpauth links — with a preview of exactly which slot each account goes to before anything is written
- Read device info, check the clock drift, and sync the token's time
- Scan which profile slots are in use (Molto2)
- Set the display timeout, algorithm (SHA1 / SHA256), digit count (4/6/8/10) and time step (30/60s) per profile
- Change the customer key, set a display PIN (Molto1) or lock the screen (Molto2), and factory-reset the token

PRIVATE BY DESIGN
Everything happens on your phone and the token. Your secrets are never uploaded, and the app has no analytics, accounts, or network access of its own. Encrypted Aegis vaults are decrypted locally on the device.

WHAT YOU'LL NEED
- A Token2 Molto1 or Molto2 token
- For the Molto2: a USB-C phone or a USB OTG adapter
- For the Molto1: a phone with NFC
- The camera permission is used only for scanning QR codes