An AuthToken connects the Localtonet app on one device to your account. Create a token for each device under My Tokens, sign the device in with it, then choose that token when you create a tunnel.
What an AuthToken is #
The Localtonet app signs in with an AuthToken instead of your email and password. In the dashboard the token stands for the device that uses it: a tunnel is created for a token, and it works while the app that uses this token is connected.
- Give each device its own token. A new connection that uses the same token replaces the previous one.
- The name of a token is only a label. Localtonet generates the token itself.
- An AuthToken signs a device in. It does not protect a tunnel from visitors. For that, see Access control.
Keep your tokens private. Anyone with the token can use it to sign in to the app. The same applies to the QR code and the PIN of a token.
Create a token #
-
Open My Tokens #
Open My Tokens and expand Create token.
-
Name the device #
Enter a recognizable name in Token Name, for example
Office-PC, and select Create token.Rule Detail Required An empty name shows Custom Name is required! Length At most 30 characters. Spaces Not allowed. The field does not accept spaces, and spaces in a pasted name are removed. Unique Two of your tokens cannot have the same name. -
Copy the token into the app #
The new token appears under Your tokens. Select it to copy the full token, then start the Localtonet app with it:
Terminallocaltonet --authtoken <YOUR_TOKEN>On Android, use the QR code or the PIN instead. See Connect an Android device below.
-
Choose the device in My Tunnels #
When you create a tunnel, select this token in Device token. The Quick start shows the whole flow.
The token list #
Your tokens lists every token of the account you are working in. Use Search tokens to filter by name or token, and Refresh to reload the list. On a narrow screen some columns move behind the Details button of each row.
| Column | What it shows | What you can do |
|---|---|---|
| Name | The name you gave the token. | Select the name to rename the token. The rules for a new name apply. |
| Status | Online means the Localtonet app is connected. Offline means the device is disconnected, even if its tunnels are still configured. | |
| Token | The token, with the middle part hidden. | Select it to copy the full token. The QR button opens Connect device. |
| Tunnels | Active tunnels / total tunnels linked to this token. An online device does not necessarily have an active tunnel. | |
| Client | The last reported app version and its update status. | A Need Update badge links to the download page, so you can install the latest Localtonet app. Connect the device to refresh this information. |
| Device | Thread usage, battery level and battery temperature, as last reported by the device. | For Android devices: Android device settings, SMS settings when supported, and Device action logs. Proxy Manager offers the same controls for a whole fleet. |
| Actions | IP history, Token settings, Delete token. |
IP history #
IP history opens the list of public IP addresses recorded for the token, each with its date. Above the list you see four counters: Total Repeated, Total Repeated IP, Repeated IP Last 1 Hour and Total IP Last 1 Hour. Select Refresh to update them. This is most useful for a device whose IP changes, such as a phone that rotates its mobile IP.
Token settings #
Token settings opens a panel with the full token, a Copy token button, the QR / PIN button and two settings:
| Setting | What it does | Values |
|---|---|---|
| USB device mode | Use this mode when the token connects a USB device. You manage its devices from My USB Devices. | Yes or No. The change asks for confirmation. |
| Client arguments | Saves client options with the token. Select Manage, turn on Active and fill in Arguments. The Localtonet client does not apply the arguments saved here; it applies the Arguments set on a tunnel. To choose a network interface or a local IP address, set them on each tunnel. | With Active on, the field cannot be empty. See Network selection. |
Delete a token #
Select Delete token and confirm. The dashboard warns you first:
Tunnels with this token will be stopped and deleted. A device that still uses the token can no longer connect with it. Create a new token for that device if you need it again.
Connect an Android device with a QR code or PIN #
You do not have to type a token on a phone. Every token has a QR code and a short PIN.
-
Open Connect device #
On My Tokens, select the QR button next to the token. The Connect device dialog opens.
-
Scan the code or enter the PIN #
Open Localtonet for Android. Either scan the code under Scan QR code, or type the six-digit PIN shown under Enter a PIN instead into the sign-in field of the app and select Connect.
- The PIN is valid for one minute. The dialog counts down and then shows PIN expired. Generate a new PIN to continue.
- A PIN works once. Select Generate new PIN for another device or another try.
- The QR code does not expire. It contains the token itself, so treat a photo of it like the token.
- You can also paste the token into the app. The dialog shows it with a copy button.
Token groups #
A token group contains device tokens. Groups organize devices into pools: a Rotating Proxy uses the devices of the groups you select, and a token webhook is created for a group.
-
Create a group #
On My Tokens, expand Token groups, enter a Group Name and select Create group. The name can be at most 30 characters, has no spaces and must be unique among your groups.
-
Choose its tokens #
The Manage token group dialog opens with a list of all your tokens. Tick the device tokens that belong to the group and select Save changes.
To change a group later, select Manage in its row. The dialog is built for long lists:
- Search by name. Separate several names with commas.
- Filter by device status: Any status, Online or Offline.
- Switch between All, In group and Not in group.
- Use Select all to tick every token that is shown, then untick the ones to leave out. Shift+click selects a range.
- The footer shows what will change, for example +3 to add. Reset discards your changes.
When you remove tokens from a group, the dialog asks you to confirm, because rotating proxies that use the group stop on those devices. One save can change up to 5000 tokens.
Delete group removes the group and its memberships. The tokens themselves stay.
Where tokens are used #
| Place | How the token is used |
|---|---|
| Tunnel create forms | Device token selects the device that serves the tunnel. To move an existing tunnel to another device, use Change AuthToken on the tunnel: a running tunnel stops, waits 2 seconds, then restarts with the selected token. |
| Rotating Proxy | Uses token groups instead of a single token. Every connected device in a selected group becomes an exit of the shared endpoint. |
| Webhooks | A token webhook is set up for an Auth Token Group. |
| VPN Manager | When you add a device to a network, you select the token used to sign in to Localtonet on that device. Each device needs its own token. |
| Device Terminal | The token links a computer to your account under My Devices. |
| USB devices | A token in USB device mode connects the computer that USB modems or phones are plugged into. |
| Proxy Manager | Every Android phone signs in with its own token. |
You can also list, create and delete tokens and token groups with the API and the MCP server.
While a team is selected in the dashboard, My Tokens shows and creates the tokens of that team. See Team Management.
Troubleshooting #
A token named … already exists
Token names are unique. Choose another name, or rename the existing token first.
The name cannot be longer than 30 characters
Shorten the token name or the group name to 30 characters or fewer.
The token shows Offline
The device is disconnected. Open the Localtonet app on the device to connect. If another device was started with the same token, it replaced this connection: create a separate token for each device.
The client says Wrong Token!
The value is not a complete token. Copy the full token again from My Tokens: the list hides the middle part, so use the copy button instead of selecting the visible text.
PIN expired
The PIN is valid for one minute and works once. Select Generate new PIN, or scan the QR code instead.
Unable to load the QR code and PIN
Select Try again in the dialog. If it keeps failing, copy the token and paste it into the app.