diff --git a/content/en/docs/setup/scratch.md b/content/en/docs/setup/scratch.md
index 67b1785676..46d0d451c9 100644
--- a/content/en/docs/setup/scratch.md
+++ b/content/en/docs/setup/scratch.md
@@ -258,7 +258,7 @@ The admin user (and any users) need:
 
   - a token or a password to identify them.
   - tokens are just long alphanumeric strings, 32 chars for example. See
-    - `TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null)`
+    - `TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/[:space:]" | dd bs=32 count=1 2>/dev/null)`
 
 Your tokens and passwords need to be stored in a file for the apiserver
 to read.  This guide uses `/var/lib/kube-apiserver/known_tokens.csv`.