diff --git a/apps/obsidian/src/components/AdminPanelSettings.tsx b/apps/obsidian/src/components/AdminPanelSettings.tsx
index 0b796f3226..cd6c7e3750 100644
--- a/apps/obsidian/src/components/AdminPanelSettings.tsx
+++ b/apps/obsidian/src/components/AdminPanelSettings.tsx
@@ -76,7 +76,7 @@ export const AdminPanelSettings = () => {
     }
     if (data)
       window.open(
-        `${nextRoot()}auth/token?t=${data}&url=/auth/group`,
+        `${nextRoot()}auth/token?t=${encodeURIComponent(data)}&url=/auth/group`,
         "_blank",
       );
   };
diff --git a/apps/roam/src/components/settings/AdminPanel.tsx b/apps/roam/src/components/settings/AdminPanel.tsx
index 641ad060cf..c961b221c3 100644
--- a/apps/roam/src/components/settings/AdminPanel.tsx
+++ b/apps/roam/src/components/settings/AdminPanel.tsx
@@ -328,7 +328,7 @@ const FeatureFlagsTab = (): React.ReactElement => {
     }
     if (data)
       window.open(
-        `${nextRoot()}auth/token?t=${data}&url=/auth/group`,
+        `${nextRoot()}auth/token?t=${encodeURIComponent(data)}&url=/auth/group`,
         "_blank",
       );
   };