invalid base 32 character in secret can be accepted

[everwanna]

For example, "1234" can be accepted, but "1" is not a valid base 32 character.