diff --git a/src/js/controller/login-privatekey-download.js b/src/js/controller/login-privatekey-download.js
index 18256b8..8d48264 100644
--- a/src/js/controller/login-privatekey-download.js
+++ b/src/js/controller/login-privatekey-download.js
@@ -53,7 +53,7 @@ define(function(require) {
                 keychain.downloadPrivateKey({
                     userId: userId,
                     keyId: keypair.publicKey._id,
-                    recoveryToken: $scope.recoveryToken
+                    recoveryToken: $scope.recoveryToken.toLowerCase()
                 }, function(err, encryptedPrivateKey) {
                     if (err) {
                         $scope.onError(err);
diff --git a/src/tpl/login-privatekey-download.html b/src/tpl/login-privatekey-download.html
index a1f86fa..26d58a4 100644
--- a/src/tpl/login-privatekey-download.html
+++ b/src/tpl/login-privatekey-download.html
@@ -8,7 +8,7 @@
     <div class="step" ng-show="step === 1">
       <p><b>Key sync.</b> We have sent you an email containing a recovery token. Please copy and paste the token below to download your key.</p>
 
-      <input type="text" class="input-text token" size="6" maxlength="6" ng-model="recoveryToken" placeholder="Token" focus-me="step === 1">
+      <input type="text" class="input-text token" size="6" maxlength="6" ng-model="recoveryToken" placeholder="Token" focus-me="step === 1" pattern="([a-zA-Z0-9]*)">
 
       <fieldset>
         <legend>Got USB?</legend>