diff --git a/backend/alembic/versions/0012_config_add_download_token.py b/backend/alembic/versions/0012_config_add_download_token.py
index 2302c48..a8e10ab 100644
--- a/backend/alembic/versions/0012_config_add_download_token.py
+++ b/backend/alembic/versions/0012_config_add_download_token.py
@@ -31,7 +31,9 @@ def upgrade() -> None:
         )
     # Remove the DB-level default — ORM model provides Python-level default
     op.alter_column("configs", "download_token", server_default=None)
+    op.create_index("ix_configs_download_token", "configs", ["download_token"])
 
 
 def downgrade() -> None:
+    op.drop_index("ix_configs_download_token", table_name="configs")
     op.drop_column("configs", "download_token")
diff --git a/backend/app/models.py b/backend/app/models.py
index 623816e..be92e02 100644
--- a/backend/app/models.py
+++ b/backend/app/models.py
@@ -31,6 +31,7 @@ class Config(Base):
     download_token: Mapped[str] = mapped_column(
         String(64),
         nullable=False,
+        index=True,
         default=lambda: secrets.token_urlsafe(32),
     )
     owner_id: Mapped[int] = mapped_column(Integer, ForeignKey("users.id"), nullable=False)