They may be random, but are they secure?