diff --git a/backend/config/components.php b/backend/config/components.php
index 701cfb3..31d7a5d 100644
--- a/backend/config/components.php
+++ b/backend/config/components.php
@@ -6,7 +6,7 @@
 
 return [
     'request' => [
-        'cookieValidationKey' => 'api1337', // TODO this should be dynamic
+        'cookieValidationKey' => uniqid(uniqid(), true)
     ],
 
     'urlManager' => [