diff --git a/app/controllers/user_controller.rb b/app/controllers/user_controller.rb
index 7bfabe55..409dae43 100644
--- a/app/controllers/user_controller.rb
+++ b/app/controllers/user_controller.rb
@@ -174,7 +174,7 @@ class UserController < ApplicationController
   end
 
   def edit_security
-    current_user.otp_secret_key = User.otp_random_secret
+    current_user.otp_secret_key = User.otp_random_secret(26)
 
     @provisioning_uri = current_user.provisioning_uri(nil, issuer: APP_CONFIG[:hostname])
     qr_code = RQRCode::QRCode.new(current_user.provisioning_uri("Retrospring:#{current_user.screen_name}", issuer: "Retrospring"))