diff --git a/pypi_release.py b/pypi_release.py
index 5c8e668..357e523 100644
--- a/pypi_release.py
+++ b/pypi_release.py
@@ -299,7 +299,7 @@ def git_show_commit(commit):
     check_call(command)
 
 def git_stash_push():
-    token = passwordy.urandom_hex(32)
+    token = passwordy.random_hex(32)
     command = [GIT, 'stash', 'push', '--include-untracked', '--message', token]
     output = check_output(command)
 
diff --git a/sole_subdir_lift.py b/sole_subdir_lift.py
index c5886b1..142daa8 100644
--- a/sole_subdir_lift.py
+++ b/sole_subdir_lift.py
@@ -42,7 +42,7 @@ def sole_lift_argparse(args):
         # child is renamed to random hex so that the grandchildren we are about
         # to lift don't have name conflicts with the child dir itself.
         # Consider .\abc\abc where the grandchild can't be moved.
-        temp_dir = directory.with_child(passwordy.urandom_hex(32))
+        temp_dir = directory.with_child(passwordy.random_hex(32))
         os.rename(child, temp_dir)
         for grandchild in temp_dir.listdir():
             shutil.move(grandchild, directory)
diff --git a/watchforlinks.py b/watchforlinks.py
index f6104a6..eb9fc0c 100644
--- a/watchforlinks.py
+++ b/watchforlinks.py
@@ -44,7 +44,7 @@ def loop_once(extension, regex=None):
     if regex and not re.search(regex, text):
         return
 
-    path = pathclass.Path(passwordy.urandom_hex(12)).add_extension(extension)
+    path = pathclass.Path(passwordy.random_hex(12)).add_extension(extension)
     pyperclip.copy('')
     pipeable.stdout(f'{path.basename} {text}')
     path.write('w', text, encoding='utf-8')