diff --git a/internal_packages/onboarding/lib/token-auth-page.cjsx b/internal_packages/onboarding/lib/token-auth-page.cjsx
index 7cb00670c..847285121 100644
--- a/internal_packages/onboarding/lib/token-auth-page.cjsx
+++ b/internal_packages/onboarding/lib/token-auth-page.cjsx
@@ -123,10 +123,10 @@ class TokenAuthPage extends React.Component
     if @state.tokenAuthInflight
       return
 
-    if not @state.token
+    if not @state.token or not /^[\w]{32}$/.test(@state.token)
       @setState({
         tokenAuthInflight: false,
-        tokenValidityError: "Please enter an invitation code."
+        tokenValidityError: "Please enter a valid invitation code."
       })
       @_resize()
       return