diff --git a/hermes_cli/config.py b/hermes_cli/config.py
index fdd3e541f38f..c4138cf5fda5 100644
--- a/hermes_cli/config.py
+++ b/hermes_cli/config.py
@@ -2520,7 +2520,7 @@ def _ensure_hermes_home_managed(home: Path):
 
 
     # Config schema version - bump this when adding new required fields
-    "_config_version": 29,
+    "_config_version": 30,
 }
 
 # =============================================================================
@@ -4809,6 +4809,17 @@ def migrate_config(interactive: bool = True, quiet: bool = False) -> Dict[str, A
             if not quiet:
                 print("  ✓ Renamed write_mode → write_approval (boolean gate)")
 
+    # ── Version 29 → 30: clear HERMES_DASHBOARD_SESSION_TOKEN from .env ──
+    # Remote mode now uses username/password auth; local mode auto-generates tokens per boot.
+    if current_ver < 30:
+        try:
+            removed = remove_env_value("HERMES_DASHBOARD_SESSION_TOKEN")
+            if removed and not quiet:
+                print("  ✓ Removed HERMES_DASHBOARD_SESSION_TOKEN from .env (no longer used)")
+        except Exception as exc:
+            if not quiet:
+                print(f"  ⚠ Failed to remove HERMES_DASHBOARD_SESSION_TOKEN from .env: {exc}")
+
     if current_ver < latest_ver and not quiet:
         print(f"Config version: {current_ver} → {latest_ver}")