diff --git a/app/api/api_tokens.py b/app/api/api_tokens.py
index 88f05032..eb48bb12 100644
--- a/app/api/api_tokens.py
+++ b/app/api/api_tokens.py
@@ -131,7 +131,7 @@ async def create_token(
     """
     plaintext = generate_api_token()
     token_hash_value = hash_token(plaintext)
-    prefix = plaintext[:12]  # "de_" + first 9 random chars
+    prefix = plaintext[:12]  # "de_" prefix + 9 random chars = 12 chars total
 
     db_token = ApiToken(
         owner_id=owner_id,
diff --git a/app/models.py b/app/models.py
index 9a4ec2bc..687bf3da 100644
--- a/app/models.py
+++ b/app/models.py
@@ -627,7 +627,7 @@ class ApiToken(Base):
     # SHA-256 hex digest of the full token value
     token_hash = Column(String(64), nullable=False, unique=True, index=True)
 
-    # First 8 characters of the token for display (e.g. "de_Ab3xY…")
+    # First 12 characters of the token for display (e.g. "de_Ab3xY7kL…")
     token_prefix = Column(String(16), nullable=False)
 
     # Usage tracking