diff --git a/qubes/storage/zfs.py b/qubes/storage/zfs.py
index d0b16068c..6cd6f58e6 100644
--- a/qubes/storage/zfs.py
+++ b/qubes/storage/zfs.py
@@ -7,7 +7,7 @@
 import dataclasses
 import logging
 import os
-import random
+import secrets
 import shlex
 import shutil
 import string
@@ -81,7 +81,7 @@ def get_random_string(
     length: int,
     character_set: str = string.ascii_lowercase,
 ) -> str:
-    return "".join(random.choice(character_set) for _ in range(length))
+    return "".join(secrets.choice(character_set) for _ in range(length))
 
 
 T = TypeVar("T")
diff --git a/qubes/utils.py b/qubes/utils.py
index 49e0d0e89..7a839e43c 100644
--- a/qubes/utils.py
+++ b/qubes/utils.py
@@ -23,8 +23,8 @@
 import asyncio
 import hashlib
 import logging
-import random
 import re
+import secrets
 import string
 import os
 import os.path
@@ -186,7 +186,7 @@ def get_entry_point_one(group, name):
 def random_string(length=5):
     """Return random string consisting of ascii_leters and digits"""
     return "".join(
-        random.choice(string.ascii_letters + string.digits)
+        secrets.choice(string.ascii_letters + string.digits)
         for _ in range(length)
     )