diff --git a/database/func.go b/database/func.go
index dd4a026..6101ea9 100644
--- a/database/func.go
+++ b/database/func.go
@@ -599,12 +599,19 @@ func (db *Database) CreateRunner(name string) (Runner, error) {
 
 	validName := regexp.MustCompile(`[A-Z0-9_]+$`)
 	if !validName.MatchString(name) {
-		return s, fmt.Errorf("secren name must be made up of only uppercase letters, numbers, and underscores")
+		return s, fmt.Errorf("runner name must be made up of only uppercase letters, numbers, and underscores")
 	}
 
 	query := `
 INSERT INTO runners (id, name, token)
-VALUES (uuid_generate_v4(), $1, TODO_GENERATE_STRING)
+VALUES
+  (
+    uuid_generate_v4(),
+    $1,
+    (
+      SELECT md5(random()::text)
+    )
+)
 RETURNING id, name, token;`
 
 	var idStr string