shopping cart   0

Token2 Molto-1-i Multi-profile TOTP hardware token

shipping costs will be calculated at the checkout page
27.54 USD

Token2 Molto-1-i is a programmable multi-profile hardware token. Having a multi-profile programmable hardware token means you can have only one device for up to 10 of your accounts. 

Molto-1-i supports long seeds (up to 128 base32 chars) and can be configured with different hash types (sha1 or sha256), time offset (30 seconds or 60 seconds), number of digits (6 or 8 digits)  and an optional PIN code protection


Dimensions 46x71x4mm
TOTP Profiles up to 10
Programmable via NFC, Windows, iPhone and Android app
Time sync Yes
NFC Access Password protected - password can be changed
Timestep 30 or 60 seconds
OTP Length 6 or 8 digits
Maximal seed length 160 HEX (128 base32)
Seed hash algorithm SHA-1 or SHA-256
Extra security PIN protection - OTPs will not show without the correct PIN code entered
Burning/programming/configuring the Molto-1-i token is done via NFC using a special burner app. We currently have  iPhone, Windows and Android versions of the burner app.

Windows App guide   Android App guide iPhone App guide


Q. What is the difference between Molto-1-i and Molto-1 ?

A. Molto-1-i works with Android, Windows and iPhone apps . Molto-1 supports only Windows and Android apps. Additionally, Molto-1-i has PIN protection feature.

Q. How secure is the procedure of programming/seeding the Molto-1-i via NFC?

A. There is absolutely no way to retrieve the seeds anyhow from the device. However, to fully ensure security, in particular, to prevent replay attack by modifying the system time (which is a highly demanded feature to solve the time drift issues) Molto-1 can be protected by setting an NFC access password. New devices will come with a default NFC access password which can be changed immediately. To prevent brute-force attack, the devices will be reset to factory defaults after around 100 unsuccessful NFC access attempts.

Q. What if I have set an NFC access password and forgot it. Does it mean that I can no longer use Molto-1?

A. No, you can still use it by resetting to factory default. This reset will set NFC access password to default,  but the operation will also clear all TOTP profiles (seeds and settings).

Q. How long does the battery last? 

 A. Battery life depends on usage. Burning/programming operations via NFC consume a lot more power, so we must take that into account as well. As a rough estimation, if a token is used a few times per day (i.e. each profile is used once - so 10 button presses a day) and the NFC operations are not very frequent (i.e. not more than once a month) - the Molto-1 token will last for 4-5 years. 

Q. Will I lose access to the TOTP profiles when the battery is dead?

 A. Yes, but you will have enough time to prepare. Molto-1 will have a battery indicator on the display (). The indicator will show the status throughout the life of the token () . You should replace your token (and migrate the TOTP tokens by resetting the second factor on each respective service) when the indicator shows the battery level as "empty" () - you will still have a couple of months to do this.

Please check product and platform compatibility before placing an order

All pictures shown are for illustration purpose only. Actual product may slightly vary due to product enhancement or other reasons.
The price displayed on this page includes the cost of the hardware, license fees as well as support during the warranty period of each hardware token. Detailed repartition of costs will be shown on the final invoice.
stock: 222

   Compare this product with
  •    Molto-2 v2
  •    c203
  •    Molto-2
  •    OTPC-P2-i Nonbranded
  •    EVVIS-QR-1
  •    miniOTP-3-i Nonbranded
  •    OTPC-P2-i
  •    OTPC-P1-i
  •    miniOTP-2-i
  •    C302-i
  •    C301-i
  •    C105
  •    Molto-1
  •    OTPC-P2
  •    miniOTP-3 Nonbranded
  •    miniOTP-3-i
  •    OTPC-P2 Nonbranded
  •    OTPC-P1
  •    miniOTP-2
  •    miniOTP-1
  •    OTPC-N
  •    c202
  • SKU T2-61

    Wordpress fully compatible
    Google Account fully compatible
    Azure On-Prem MFA Server fully compatible
    Azure Cloud MFA / Office 365 AD Premium P1 or P2 fully compatible
    Azure Cloud MFA / Office 365 AD Free/Basic fully compatible
    Stripe Dashboard fully compatible
    Meraki Dashboard fully compatible
    ISDecisions UserLock fully compatible
    ESET Secure Authentication fully compatible
    Watchguard AuthPoint fully compatible
    Duo fully compatible
    AWS fully compatible
    application or system developed by you fully compatible
    not listed here contact us to check the compatibility
    Volume Orders
    For large orders, Token2 offers volume discounts.If you are interested in larger volume orders, please contact us and we will get back with a quote immediately