--- a/cubicweb/pyramid/config.py	Thu Mar 28 11:15:28 2019 +0100
+++ b/cubicweb/pyramid/config.py	Fri Apr 05 17:21:14 2019 +0200
@@ -32,7 +32,9 @@
 def get_random_secret_key():
     """Return 50-character secret string"""
     chars = string.ascii_letters + string.digits
-    return "".join([random.choice(chars) for i in range(50)])
+    secure_random = random.SystemRandom()
+
+    return "".join([secure_random.choice(chars) for i in range(50)])
 
 
 class CubicWebPyramidConfiguration(BaseWebConfiguration, ServerConfiguration):