You need to double check the library you're using. For example, older versions of the Python standard UUID library would fall back to an insecure RNG silently.

You need to double check the library you're using. For example, older versions of the Python standard UUID library would fall back to an insecure RNG silently. It's easier to just read 16 bytes from /dev/urandom and encode it in hex/base64 yourself for a random token.