diff --git a/lib/db.js b/lib/db.js
index 245929c..ca70096 100644
--- a/lib/db.js
+++ b/lib/db.js
@@ -3,12 +3,12 @@ import xkcdPassword from 'xkcd-password'
 
 const TOKEN_OPTIONS = {
   numWords: 4,
-  minLength: 4,
-  maxLength: 8
+  minLength: 3,
+  maxLength: 20
 }
 
-var tokens = {}
-var tokenGenerator = new xkcdPassword()
+let tokens = {}
+const tokenGenerator = new xkcdPassword()
 tokenGenerator.initWithWordList(toppings)
 
 export function create(socket) {