diff --git a/java/google/registry/config/RegistryConfig.java b/java/google/registry/config/RegistryConfig.java
index 24dfe3a58..5a3e9f01e 100644
--- a/java/google/registry/config/RegistryConfig.java
+++ b/java/google/registry/config/RegistryConfig.java
@@ -33,6 +33,7 @@ import java.lang.annotation.Documented;
 import java.lang.annotation.Retention;
 import java.net.URI;
 import java.net.URL;
+import java.security.SecureRandom;
 import java.util.Optional;
 import java.util.Random;
 import java.util.stream.Collectors;
@@ -1267,7 +1268,7 @@ public final class RegistryConfig {
     @Singleton
     @Provides
     public static Random provideRandom() {
-      return new Random();
+      return new SecureRandom();
     }
   }