diff --git a/cashu/core/crypto/keys.py b/cashu/core/crypto/keys.py
index bee0237d7..668bf4135 100644
--- a/cashu/core/crypto/keys.py
+++ b/cashu/core/crypto/keys.py
@@ -1,6 +1,6 @@
 import base64
 import hashlib
-import random
+import os
 from typing import Dict, List, Optional
 
 from bip32 import BIP32
@@ -185,6 +185,4 @@ def derive_keyset_id_deprecated(keys: Dict[int, PublicKey]):
 
 def random_hash() -> str:
     """Returns a base64-urlsafe encoded random hash."""
-    return base64.urlsafe_b64encode(
-        bytes([random.getrandbits(8) for i in range(30)])
-    ).decode()
+    return base64.urlsafe_b64encode(os.urandom(30)).decode()