diff --git a/apps/web/src/dashboard/index.html b/apps/web/src/dashboard/index.html
index 409181c..896c02e 100644
--- a/apps/web/src/dashboard/index.html
+++ b/apps/web/src/dashboard/index.html
@@ -21,7 +21,7 @@
         <form id="login-form" action="/account/login" method="POST">
           <input type="hidden" name="_form" value="1">
           <label class="block text-xs text-gray-500 uppercase tracking-wider mb-2">Account Key</label>
-          <input id="key-input" name="key" type="text" placeholder="XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX" autocomplete="off" spellcheck="false"
+          <input id="key-input" name="key" type="text" placeholder="XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX" autocomplete="off" spellcheck="false"
             class="w-full bg-gray-800 border border-gray-700 rounded-lg px-4 py-3 text-gray-100 placeholder-gray-600 focus:outline-none focus:border-blue-500 text-sm font-mono tracking-wider"
             maxlength="71">
           <button type="submit"
diff --git a/apps/web/src/routes/auth.ts b/apps/web/src/routes/auth.ts
index 7a05451..2e72e94 100644
--- a/apps/web/src/routes/auth.ts
+++ b/apps/web/src/routes/auth.ts
@@ -4,8 +4,8 @@ import sql from "../db";
 
 function generateKey(): string {
   const hex = randomBytes(32).toString("hex"); // 64 hex chars
-  // Format as 8 groups of 4: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
-  return (hex.match(/.{4}/g) as string[]).join("-").toUpperCase();
+  // Format as 8 groups of 8: XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX
+  return (hex.match(/.{8}/g) as string[]).join("-").toUpperCase();
 }
 
 function normalizeKey(raw: string): string {