diff --git a/packages/rocketchat-iframe-login/iframe_server.js b/packages/rocketchat-iframe-login/iframe_server.js
index 1b1c49008ff..9db26b6e723 100644
--- a/packages/rocketchat-iframe-login/iframe_server.js
+++ b/packages/rocketchat-iframe-login/iframe_server.js
@@ -5,6 +5,8 @@ Accounts.registerLoginHandler('iframe', function(result) {
 		return;
 	}
 
+	check(result.token, String);
+
 	console.log('[Method] registerLoginHandler');
 
 	const user = Meteor.users.findOne({