diff --git a/API/Controller/Tokens/TokenController.cs b/API/Controller/Tokens/TokenController.cs
index 194a74fa..d83e7d5d 100644
--- a/API/Controller/Tokens/TokenController.cs
+++ b/API/Controller/Tokens/TokenController.cs
@@ -107,23 +107,25 @@ public async Task<IActionResult> DeleteToken([FromRoute] Guid tokenId)
     [ProducesResponseType<TokenCreatedResponse>(StatusCodes.Status200OK, MediaTypeNames.Application.Json)]
     public async Task<TokenCreatedResponse> CreateToken([FromBody] CreateTokenRequest body)
     {
-        var token = new ApiToken
+        string token = CryptoUtils.RandomString(HardLimits.ApiKeyTokenLength);
+
+        var tokenDto = new ApiToken
         {
             UserId = CurrentUser.DbUser.Id,
-            Token = CryptoUtils.RandomString(HardLimits.ApiKeyTokenMaxLength),
+            TokenHash = HashingUtils.HashSha256(token),
             CreatedByIp = HttpContext.GetRemoteIP().ToString(),
             Permissions = body.Permissions.Distinct().ToList(),
             Id = Guid.NewGuid(),
             Name = body.Name,
             ValidUntil = body.ValidUntil?.ToUniversalTime()
         };
-        _db.ApiTokens.Add(token);
+        _db.ApiTokens.Add(tokenDto);
         await _db.SaveChangesAsync();
 
         return new TokenCreatedResponse
         {
-            Token = token.Token,
-            Id = token.Id
+            Token = token,
+            Id = tokenDto.Id
         };
     }
 
@@ -153,7 +155,7 @@ public async Task<IActionResult> EditToken([FromRoute] Guid tokenId, [FromBody]
 
     public class EditTokenRequest
     {
-        [StringLength(HardLimits.ApiKeyTokenMaxLength, MinimumLength = HardLimits.ApiKeyTokenMinLength, ErrorMessage = "API token length must be between {1} and {2}")]
+        [StringLength(HardLimits.ApiKeyNameMaxLength, MinimumLength = 1, ErrorMessage = "API token length must be between {1} and {2}")]
         public required string Name { get; set; }
         
         [MaxLength(HardLimits.ApiKeyMaxPermissions, ErrorMessage = "API token permissions must be between {1} and {2}")]
diff --git a/Common/Authentication/Handlers/LoginSessionAuthentication.cs b/Common/Authentication/Handlers/LoginSessionAuthentication.cs
index a7e5a30f..55c3037e 100644
--- a/Common/Authentication/Handlers/LoginSessionAuthentication.cs
+++ b/Common/Authentication/Handlers/LoginSessionAuthentication.cs
@@ -65,7 +65,9 @@ protected override Task<AuthenticateResult> HandleAuthenticateAsync()
 
     private async Task<AuthenticateResult> TokenAuth(string token)
     {
-        var tokenDto = await _db.ApiTokens.Include(x => x.User).FirstOrDefaultAsync(x => x.Token == token &&
+        string tokenHash = HashingUtils.HashSha256(token);
+
+        var tokenDto = await _db.ApiTokens.Include(x => x.User).FirstOrDefaultAsync(x => x.TokenHash == tokenHash &&
             (x.ValidUntil == null || x.ValidUntil >= DateTime.UtcNow));
         if (tokenDto == null) return Fail(AuthResultError.TokenInvalid);
 
diff --git a/Common/Constants/HardLimits.cs b/Common/Constants/HardLimits.cs
index 2685c1d1..34c1063d 100644
--- a/Common/Constants/HardLimits.cs
+++ b/Common/Constants/HardLimits.cs
@@ -20,8 +20,7 @@ public static class HardLimits
     public const int UserAgentMaxLength = 1024;
     
     public const int ApiKeyNameMaxLength = 64;
-    public const int ApiKeyTokenMinLength = 1;
-    public const int ApiKeyTokenMaxLength = 64;
+    public const int ApiKeyTokenLength = 64;
     public const int ApiKeyMaxPermissions = 256;
     
     public const int HubNameMinLength = 1;
@@ -34,9 +33,10 @@ public static class HardLimits
     public const int ShockerShareLinkNameMinLength = 1;
     public const int ShockerShareLinkNameMaxLength = 64;
 
+    public const int SemVerMaxLength = 64;
     public const int IpAddressMaxLength = 40;
+    public const int Sha256HashHexLength = 64;
 
-    public const int SemVerMaxLength = 64;
     public const int OtaUpdateMessageMaxLength = 128;
 
     public const int PasswordHashMaxLength = 100;
diff --git a/Common/Migrations/20241123181710_Hash API tokens.Designer.cs b/Common/Migrations/20241123181710_Hash API tokens.Designer.cs
new file mode 100644
index 00000000..f9018436
--- /dev/null
+++ b/Common/Migrations/20241123181710_Hash API tokens.Designer.cs	
@@ -0,0 +1,1129 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+using OpenShock.Common.OpenShockDb;
+
+#nullable disable
+
+namespace OpenShock.Common.Migrations
+{
+    [DbContext(typeof(OpenShockContext))]
+    [Migration("20241123181710_Hash API tokens")]
+    partial class HashAPItokens
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("Npgsql:CollationDefinition:public.ndcoll", "und-u-ks-level2,und-u-ks-level2,icu,False")
+                .HasAnnotation("ProductVersion", "9.0.0")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "control_type", new[] { "sound", "vibrate", "shock", "stop" });
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "ota_update_status", new[] { "started", "running", "finished", "error", "timeout" });
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "password_encryption_type", new[] { "pbkdf2", "bcrypt_enhanced" });
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "permission_type", new[] { "shockers.use", "shockers.edit", "shockers.pause", "devices.edit", "devices.auth" });
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "rank_type", new[] { "user", "support", "staff", "admin", "system" });
+            NpgsqlModelBuilderExtensions.HasPostgresEnum(modelBuilder, "shocker_model_type", new[] { "caiXianlin", "petTrainer", "petrainer998DR" });
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.AdminUsersView", b =>
+                {
+                    b.Property<int>("ApiTokenCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("api_token_count");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<int>("DeviceCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("device_count");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("character varying")
+                        .HasColumnName("email");
+
+                    b.Property<bool>("EmailActivated")
+                        .HasColumnType("boolean")
+                        .HasColumnName("email_actived");
+
+                    b.Property<int>("EmailChangeRequestCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("email_change_request_count");
+
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("character varying")
+                        .HasColumnName("name");
+
+                    b.Property<int>("NameChangeRequestCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("name_change_request_count");
+
+                    b.Property<string>("PasswordHashType")
+                        .IsRequired()
+                        .HasColumnType("character varying")
+                        .HasColumnName("password_hash_type");
+
+                    b.Property<int>("PasswordResetCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("password_reset_count");
+
+                    b.Property<int>("Rank")
+                        .HasColumnType("rank_type")
+                        .HasColumnName("rank");
+
+                    b.Property<int>("ShockerControlLogCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("shocker_control_log_count");
+
+                    b.Property<int>("ShockerCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("shocker_count");
+
+                    b.Property<int>("ShockerShareCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("shocker_share_count");
+
+                    b.Property<int>("ShockerShareLinkCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("shocker_share_link_count");
+
+                    b.Property<int>("UserActivationCount")
+                        .HasColumnType("integer")
+                        .HasColumnName("user_activation_count");
+
+                    b.ToTable((string)null);
+
+                    b.ToView("admin_users_view", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ApiToken", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CreatedByIp")
+                        .IsRequired()
+                        .HasMaxLength(40)
+                        .HasColumnType("character varying(40)")
+                        .HasColumnName("created_by_ip");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<DateTime>("LastUsed")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("last_used")
+                        .HasDefaultValueSql("'-infinity'::timestamp without time zone");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("name");
+
+                    b.PrimitiveCollection<int[]>("Permissions")
+                        .IsRequired()
+                        .HasColumnType("permission_type[]")
+                        .HasColumnName("permissions");
+
+                    b.Property<string>("TokenHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("token_hash");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.Property<DateTime?>("ValidUntil")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("valid_until");
+
+                    b.HasKey("Id")
+                        .HasName("api_tokens_pkey");
+
+                    b.HasIndex("TokenHash")
+                        .IsUnique();
+
+                    b.HasIndex("UserId")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("ValidUntil")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("api_tokens", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Device", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("Owner")
+                        .HasColumnType("uuid")
+                        .HasColumnName("owner");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(256)
+                        .HasColumnType("character varying(256)")
+                        .HasColumnName("token");
+
+                    b.HasKey("Id")
+                        .HasName("devices_pkey");
+
+                    b.HasIndex("Owner")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.ToTable("devices", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.DeviceOtaUpdate", b =>
+                {
+                    b.Property<Guid>("Device")
+                        .HasColumnType("uuid")
+                        .HasColumnName("device");
+
+                    b.Property<int>("UpdateId")
+                        .HasColumnType("integer")
+                        .HasColumnName("update_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Message")
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)")
+                        .HasColumnName("message");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("ota_update_status")
+                        .HasColumnName("status");
+
+                    b.Property<string>("Version")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("version");
+
+                    b.HasKey("Device", "UpdateId")
+                        .HasName("device_ota_updates_pkey");
+
+                    b.HasIndex(new[] { "CreatedOn" }, "device_ota_updates_created_on_idx")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("device_ota_updates", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.PasswordReset", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Secret")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("secret");
+
+                    b.Property<DateTime?>("UsedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("used_on");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("Id")
+                        .HasName("password_resets_pkey");
+
+                    b.HasIndex("UserId")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("password_resets", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShareRequest", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<Guid>("Owner")
+                        .HasColumnType("uuid")
+                        .HasColumnName("owner");
+
+                    b.Property<Guid?>("User")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user");
+
+                    b.HasKey("Id")
+                        .HasName("shares_codes_pkey");
+
+                    b.HasIndex("Owner")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("User");
+
+                    b.ToTable("share_requests", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShareRequestsShocker", b =>
+                {
+                    b.Property<Guid>("ShareRequest")
+                        .HasColumnType("uuid")
+                        .HasColumnName("share_request");
+
+                    b.Property<Guid>("Shocker")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shocker");
+
+                    b.Property<int?>("LimitDuration")
+                        .HasColumnType("integer")
+                        .HasColumnName("limit_duration");
+
+                    b.Property<byte?>("LimitIntensity")
+                        .HasColumnType("smallint")
+                        .HasColumnName("limit_intensity");
+
+                    b.Property<bool>("PermLive")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_live");
+
+                    b.Property<bool>("PermShock")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_shock");
+
+                    b.Property<bool>("PermSound")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_sound");
+
+                    b.Property<bool>("PermVibrate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_vibrate");
+
+                    b.HasKey("ShareRequest", "Shocker")
+                        .HasName("share_requests_shockers_pkey");
+
+                    b.HasIndex("Shocker");
+
+                    b.ToTable("share_requests_shockers", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Shocker", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<Guid>("Device")
+                        .HasColumnType("uuid")
+                        .HasColumnName("device");
+
+                    b.Property<int>("Model")
+                        .HasColumnType("shocker_model_type")
+                        .HasColumnName("model");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("name");
+
+                    b.Property<bool>("Paused")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(false)
+                        .HasColumnName("paused");
+
+                    b.Property<int>("RfId")
+                        .HasColumnType("integer")
+                        .HasColumnName("rf_id");
+
+                    b.HasKey("Id")
+                        .HasName("shockers_pkey");
+
+                    b.HasIndex("Device")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("shockers", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerControlLog", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<Guid?>("ControlledBy")
+                        .HasColumnType("uuid")
+                        .HasColumnName("controlled_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("CustomName")
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("custom_name");
+
+                    b.Property<long>("Duration")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration");
+
+                    b.Property<byte>("Intensity")
+                        .HasColumnType("smallint")
+                        .HasColumnName("intensity");
+
+                    b.Property<bool>("LiveControl")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(false)
+                        .HasColumnName("live_control");
+
+                    b.Property<Guid>("ShockerId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shocker_id");
+
+                    b.Property<int>("Type")
+                        .HasColumnType("control_type")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("shocker_control_logs_pkey");
+
+                    b.HasIndex("ControlledBy");
+
+                    b.HasIndex("ShockerId")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("shocker_control_logs", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerShare", b =>
+                {
+                    b.Property<Guid>("ShockerId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shocker_id");
+
+                    b.Property<Guid>("SharedWith")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shared_with");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<int?>("LimitDuration")
+                        .HasColumnType("integer")
+                        .HasColumnName("limit_duration");
+
+                    b.Property<byte?>("LimitIntensity")
+                        .HasColumnType("smallint")
+                        .HasColumnName("limit_intensity");
+
+                    b.Property<bool>("Paused")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(false)
+                        .HasColumnName("paused");
+
+                    b.Property<bool>("PermLive")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_live");
+
+                    b.Property<bool>("PermShock")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_shock");
+
+                    b.Property<bool>("PermSound")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_sound");
+
+                    b.Property<bool>("PermVibrate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_vibrate");
+
+                    b.HasKey("ShockerId", "SharedWith")
+                        .HasName("shocker_shares_pkey");
+
+                    b.HasIndex("SharedWith")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("shocker_shares", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerShareCode", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<int?>("LimitDuration")
+                        .HasColumnType("integer")
+                        .HasColumnName("limit_duration");
+
+                    b.Property<byte?>("LimitIntensity")
+                        .HasColumnType("smallint")
+                        .HasColumnName("limit_intensity");
+
+                    b.Property<bool>("PermShock")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_shock");
+
+                    b.Property<bool>("PermSound")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_sound");
+
+                    b.Property<bool>("PermVibrate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_vibrate");
+
+                    b.Property<Guid>("ShockerId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shocker_id");
+
+                    b.HasKey("Id")
+                        .HasName("shocker_share_codes_pkey");
+
+                    b.HasIndex("ShockerId");
+
+                    b.ToTable("shocker_share_codes", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerSharesLink", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<DateTime?>("ExpiresOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("expires_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("character varying(64)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("OwnerId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("owner_id");
+
+                    b.HasKey("Id")
+                        .HasName("shocker_shares_links_pkey");
+
+                    b.HasIndex("OwnerId")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("shocker_shares_links", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerSharesLinksShocker", b =>
+                {
+                    b.Property<Guid>("ShareLinkId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("share_link_id");
+
+                    b.Property<Guid>("ShockerId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("shocker_id");
+
+                    b.Property<int?>("Cooldown")
+                        .HasColumnType("integer")
+                        .HasColumnName("cooldown");
+
+                    b.Property<int?>("LimitDuration")
+                        .HasColumnType("integer")
+                        .HasColumnName("limit_duration");
+
+                    b.Property<byte?>("LimitIntensity")
+                        .HasColumnType("smallint")
+                        .HasColumnName("limit_intensity");
+
+                    b.Property<bool>("Paused")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(false)
+                        .HasColumnName("paused");
+
+                    b.Property<bool>("PermLive")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(true)
+                        .HasColumnName("perm_live");
+
+                    b.Property<bool>("PermShock")
+                        .HasColumnType("boolean")
+                        .HasColumnName("perm_shock");
+
+                    b.Property<bool>("PermSound")
+                        .HasColumnType("boolean")
+                        .HasColumnName("perm_sound");
+
+                    b.Property<bool>("PermVibrate")
+                        .HasColumnType("boolean")
+                        .HasColumnName("perm_vibrate");
+
+                    b.HasKey("ShareLinkId", "ShockerId")
+                        .HasName("shocker_shares_links_shockers_pkey");
+
+                    b.HasIndex("ShockerId");
+
+                    b.ToTable("shocker_shares_links_shockers", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(320)
+                        .HasColumnType("character varying(320)")
+                        .HasColumnName("email");
+
+                    b.Property<bool>("EmailActived")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("boolean")
+                        .HasDefaultValue(false)
+                        .HasColumnName("email_actived");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("character varying(32)")
+                        .HasColumnName("name")
+                        .UseCollation("ndcoll");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("password_hash");
+
+                    b.Property<int>("Rank")
+                        .HasColumnType("rank_type")
+                        .HasColumnName("rank");
+
+                    b.HasKey("Id")
+                        .HasName("users_pkey");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    NpgsqlIndexBuilderExtensions.UseCollation(b.HasIndex("Name"), new[] { "ndcoll" });
+
+                    b.ToTable("users", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersActivation", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Secret")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)")
+                        .HasColumnName("secret");
+
+                    b.Property<DateTime?>("UsedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("used_on");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("Id")
+                        .HasName("users_activation_pkey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("users_activation", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersEmailChange", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(320)
+                        .HasColumnType("character varying(320)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("Secret")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)")
+                        .HasColumnName("secret");
+
+                    b.Property<DateTime?>("UsedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("used_on");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("Id")
+                        .HasName("users_email_change_pkey");
+
+                    b.HasIndex("CreatedOn")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("UsedOn")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("users_email_changes", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersNameChange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityAlwaysColumn(b.Property<int>("Id"));
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on")
+                        .HasDefaultValueSql("CURRENT_TIMESTAMP");
+
+                    b.Property<string>("OldName")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("character varying(32)")
+                        .HasColumnName("old_name");
+
+                    b.HasKey("Id", "UserId")
+                        .HasName("users_name_changes_pkey");
+
+                    b.HasIndex("CreatedOn")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("OldName")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.HasIndex("UserId")
+                        .HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
+
+                    b.ToTable("users_name_changes", (string)null);
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ApiToken", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "User")
+                        .WithMany("ApiTokens")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_id");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Device", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "OwnerNavigation")
+                        .WithMany("Devices")
+                        .HasForeignKey("Owner")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("owner_user_id");
+
+                    b.Navigation("OwnerNavigation");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.DeviceOtaUpdate", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.Device", "DeviceNavigation")
+                        .WithMany("DeviceOtaUpdates")
+                        .HasForeignKey("Device")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("device_ota_updates_device");
+
+                    b.Navigation("DeviceNavigation");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.PasswordReset", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "User")
+                        .WithMany("PasswordResets")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("user_id");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShareRequest", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "OwnerNavigation")
+                        .WithMany("ShareRequestOwnerNavigations")
+                        .HasForeignKey("Owner")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_share_requests_owner");
+
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "UserNavigation")
+                        .WithMany("ShareRequestUserNavigations")
+                        .HasForeignKey("User")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .HasConstraintName("fk_share_requests_user");
+
+                    b.Navigation("OwnerNavigation");
+
+                    b.Navigation("UserNavigation");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShareRequestsShocker", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.ShareRequest", "ShareRequestNavigation")
+                        .WithMany("ShareRequestsShockers")
+                        .HasForeignKey("ShareRequest")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_share_requests_shockers_share_request");
+
+                    b.HasOne("OpenShock.Common.OpenShockDb.Shocker", "ShockerNavigation")
+                        .WithMany("ShareRequestsShockers")
+                        .HasForeignKey("Shocker")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_share_requests_shockers_shocker");
+
+                    b.Navigation("ShareRequestNavigation");
+
+                    b.Navigation("ShockerNavigation");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Shocker", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.Device", "DeviceNavigation")
+                        .WithMany("Shockers")
+                        .HasForeignKey("Device")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("device_id");
+
+                    b.Navigation("DeviceNavigation");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerControlLog", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "ControlledByNavigation")
+                        .WithMany("ShockerControlLogs")
+                        .HasForeignKey("ControlledBy")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .HasConstraintName("fk_controlled_by");
+
+                    b.HasOne("OpenShock.Common.OpenShockDb.Shocker", "Shocker")
+                        .WithMany("ShockerControlLogs")
+                        .HasForeignKey("ShockerId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_shocker_id");
+
+                    b.Navigation("ControlledByNavigation");
+
+                    b.Navigation("Shocker");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerShare", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "SharedWithNavigation")
+                        .WithMany("ShockerShares")
+                        .HasForeignKey("SharedWith")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("shared_with_user_id");
+
+                    b.HasOne("OpenShock.Common.OpenShockDb.Shocker", "Shocker")
+                        .WithMany("ShockerShares")
+                        .HasForeignKey("ShockerId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("ref_shocker_id");
+
+                    b.Navigation("SharedWithNavigation");
+
+                    b.Navigation("Shocker");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerShareCode", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.Shocker", "Shocker")
+                        .WithMany("ShockerShareCodes")
+                        .HasForeignKey("ShockerId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_shocker_id");
+
+                    b.Navigation("Shocker");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerSharesLink", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "Owner")
+                        .WithMany("ShockerSharesLinks")
+                        .HasForeignKey("OwnerId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("owner_id");
+
+                    b.Navigation("Owner");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerSharesLinksShocker", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.ShockerSharesLink", "ShareLink")
+                        .WithMany("ShockerSharesLinksShockers")
+                        .HasForeignKey("ShareLinkId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("share_link_id");
+
+                    b.HasOne("OpenShock.Common.OpenShockDb.Shocker", "Shocker")
+                        .WithMany("ShockerSharesLinksShockers")
+                        .HasForeignKey("ShockerId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("shocker_id");
+
+                    b.Navigation("ShareLink");
+
+                    b.Navigation("Shocker");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersActivation", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "User")
+                        .WithMany("UsersActivations")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("user_id");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersEmailChange", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "User")
+                        .WithMany("UsersEmailChanges")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_id");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.UsersNameChange", b =>
+                {
+                    b.HasOne("OpenShock.Common.OpenShockDb.User", "User")
+                        .WithMany("UsersNameChanges")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_id");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Device", b =>
+                {
+                    b.Navigation("DeviceOtaUpdates");
+
+                    b.Navigation("Shockers");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShareRequest", b =>
+                {
+                    b.Navigation("ShareRequestsShockers");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.Shocker", b =>
+                {
+                    b.Navigation("ShareRequestsShockers");
+
+                    b.Navigation("ShockerControlLogs");
+
+                    b.Navigation("ShockerShareCodes");
+
+                    b.Navigation("ShockerShares");
+
+                    b.Navigation("ShockerSharesLinksShockers");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.ShockerSharesLink", b =>
+                {
+                    b.Navigation("ShockerSharesLinksShockers");
+                });
+
+            modelBuilder.Entity("OpenShock.Common.OpenShockDb.User", b =>
+                {
+                    b.Navigation("ApiTokens");
+
+                    b.Navigation("Devices");
+
+                    b.Navigation("PasswordResets");
+
+                    b.Navigation("ShareRequestOwnerNavigations");
+
+                    b.Navigation("ShareRequestUserNavigations");
+
+                    b.Navigation("ShockerControlLogs");
+
+                    b.Navigation("ShockerShares");
+
+                    b.Navigation("ShockerSharesLinks");
+
+                    b.Navigation("UsersActivations");
+
+                    b.Navigation("UsersEmailChanges");
+
+                    b.Navigation("UsersNameChanges");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Common/Migrations/20241123181710_Hash API tokens.cs b/Common/Migrations/20241123181710_Hash API tokens.cs
new file mode 100644
index 00000000..559395b9
--- /dev/null
+++ b/Common/Migrations/20241123181710_Hash API tokens.cs	
@@ -0,0 +1,36 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace OpenShock.Common.Migrations
+{
+    /// <inheritdoc />
+    public partial class HashAPItokens : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.RenameColumn(
+                name: "token",
+                table: "api_tokens",
+                newName: "token_hash");
+
+            migrationBuilder.RenameIndex(
+                name: "IX_api_tokens_token",
+                table: "api_tokens",
+                newName: "IX_api_tokens_token_hash");
+            
+            migrationBuilder.Sql(
+                $"""
+                 UPDATE api_tokens SET token_hash = encode(digest(token_hash, 'sha256'), 'hex')
+                 """
+            );
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            throw new InvalidOperationException("This migration cannot be reverted because token hashing is irreversible.");
+        }
+    }
+}
diff --git a/Common/Migrations/OpenShockContextModelSnapshot.cs b/Common/Migrations/OpenShockContextModelSnapshot.cs
index 17e40578..839300bd 100644
--- a/Common/Migrations/OpenShockContextModelSnapshot.cs
+++ b/Common/Migrations/OpenShockContextModelSnapshot.cs
@@ -142,11 +142,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("permission_type[]")
                         .HasColumnName("permissions");
 
-                    b.Property<string>("Token")
+                    b.Property<string>("TokenHash")
                         .IsRequired()
                         .HasMaxLength(64)
                         .HasColumnType("character varying(64)")
-                        .HasColumnName("token");
+                        .HasColumnName("token_hash");
 
                     b.Property<Guid>("UserId")
                         .HasColumnType("uuid")
@@ -159,7 +159,7 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.HasKey("Id")
                         .HasName("api_tokens_pkey");
 
-                    b.HasIndex("Token")
+                    b.HasIndex("TokenHash")
                         .IsUnique();
 
                     b.HasIndex("UserId")
diff --git a/Common/OpenShockDb/ApiToken.cs b/Common/OpenShockDb/ApiToken.cs
index c7c770bf..d3a00b70 100644
--- a/Common/OpenShockDb/ApiToken.cs
+++ b/Common/OpenShockDb/ApiToken.cs
@@ -10,7 +10,7 @@ public partial class ApiToken
 
     public string Name { get; set; } = null!;
 
-    public string Token { get; set; } = null!;
+    public string TokenHash { get; set; } = null!;
 
     public Guid UserId { get; set; }
 
diff --git a/Common/OpenShockDb/OpenShockContext.cs b/Common/OpenShockDb/OpenShockContext.cs
index 7545658a..f7264f6d 100644
--- a/Common/OpenShockDb/OpenShockContext.cs
+++ b/Common/OpenShockDb/OpenShockContext.cs
@@ -77,7 +77,7 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
 
             entity.HasIndex(e => e.UserId).HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
             entity.HasIndex(e => e.ValidUntil).HasAnnotation("Npgsql:StorageParameter:deduplicate_items", "true");
-            entity.HasIndex(e => e.Token).IsUnique();
+            entity.HasIndex(e => e.TokenHash).IsUnique();
 
             entity.Property(e => e.Id)
                 .ValueGeneratedNever()
@@ -94,9 +94,9 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
             entity.Property(e => e.Name)
                 .HasMaxLength(HardLimits.ApiKeyNameMaxLength)
                 .HasColumnName("name");
-            entity.Property(e => e.Token)
-                .HasMaxLength(HardLimits.ApiKeyTokenMaxLength)
-                .HasColumnName("token");
+            entity.Property(e => e.TokenHash)
+                .HasMaxLength(HardLimits.Sha256HashHexLength)
+                .HasColumnName("token_hash");
             entity.Property(e => e.UserId).HasColumnName("user_id");
             entity.Property(e => e.ValidUntil).HasColumnName("valid_until");