diff --git a/packages/@uppy/aws-s3/src/MiniXHRUpload.js b/packages/@uppy/aws-s3/src/MiniXHRUpload.js
index 05d2e0a875..fc50ea11ae 100644
--- a/packages/@uppy/aws-s3/src/MiniXHRUpload.js
+++ b/packages/@uppy/aws-s3/src/MiniXHRUpload.js
@@ -1,4 +1,4 @@
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 const { Provider, RequestClient, Socket } = require('@uppy/companion-client')
 const emitSocketProgress = require('@uppy/utils/lib/emitSocketProgress')
 const getSocketHost = require('@uppy/utils/lib/getSocketHost')
diff --git a/packages/@uppy/core/src/Uppy.js b/packages/@uppy/core/src/Uppy.js
index 91b291b052..27efb05521 100644
--- a/packages/@uppy/core/src/Uppy.js
+++ b/packages/@uppy/core/src/Uppy.js
@@ -4,7 +4,7 @@
 
 const Translator = require('@uppy/utils/lib/Translator')
 const ee = require('namespace-emitter')
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 const throttle = require('lodash.throttle')
 const prettierBytes = require('@transloadit/prettier-bytes')
 const match = require('mime-match')
diff --git a/packages/@uppy/core/src/Uppy.test.js b/packages/@uppy/core/src/Uppy.test.js
index 5124b99aae..1d012f1670 100644
--- a/packages/@uppy/core/src/Uppy.test.js
+++ b/packages/@uppy/core/src/Uppy.test.js
@@ -11,7 +11,7 @@ const InvalidPluginWithoutId = require('../../../../test/mocks/invalidPluginWith
 const InvalidPluginWithoutType = require('../../../../test/mocks/invalidPluginWithoutType')
 const DeepFrozenStore = require('../../../../test/resources/DeepFrozenStore.js')
 
-jest.mock('nanoid', () => {
+jest.mock('nanoid/non-secure', () => {
   return { nanoid: () => 'cjd09qwxb000dlql4tp4doz8h' }
 })
 jest.mock('@uppy/utils/lib/findDOMElement', () => {
diff --git a/packages/@uppy/dashboard/src/components/FileCard/index.js b/packages/@uppy/dashboard/src/components/FileCard/index.js
index c1628c5b01..5aa025fe5a 100644
--- a/packages/@uppy/dashboard/src/components/FileCard/index.js
+++ b/packages/@uppy/dashboard/src/components/FileCard/index.js
@@ -1,6 +1,6 @@
 const { h, Component } = require('preact')
 const classNames = require('classnames')
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 const getFileTypeIcon = require('../../utils/getFileTypeIcon')
 const ignoreEvent = require('../../utils/ignoreEvent.js')
 const FilePreview = require('../FilePreview')
diff --git a/packages/@uppy/dashboard/src/index.js b/packages/@uppy/dashboard/src/index.js
index f40dcb39d0..361a352bbb 100644
--- a/packages/@uppy/dashboard/src/index.js
+++ b/packages/@uppy/dashboard/src/index.js
@@ -7,7 +7,7 @@ const findAllDOMElements = require('@uppy/utils/lib/findAllDOMElements')
 const toArray = require('@uppy/utils/lib/toArray')
 const getDroppedFiles = require('@uppy/utils/lib/getDroppedFiles')
 const getTextDirection = require('@uppy/utils/lib/getTextDirection')
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 const trapFocus = require('./utils/trapFocus')
 const createSuperFocus = require('./utils/createSuperFocus')
 const memoize = require('memoize-one').default || require('memoize-one')
diff --git a/packages/@uppy/store-redux/src/index.js b/packages/@uppy/store-redux/src/index.js
index 92ef1fa7e0..e4259f9fa1 100644
--- a/packages/@uppy/store-redux/src/index.js
+++ b/packages/@uppy/store-redux/src/index.js
@@ -1,4 +1,4 @@
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 
 // Redux action name.
 const STATE_UPDATE = 'uppy/STATE_UPDATE'
diff --git a/packages/@uppy/xhr-upload/src/index.js b/packages/@uppy/xhr-upload/src/index.js
index f3e2c6d90e..2590509e29 100644
--- a/packages/@uppy/xhr-upload/src/index.js
+++ b/packages/@uppy/xhr-upload/src/index.js
@@ -1,5 +1,5 @@
 const BasePlugin = require('@uppy/core/lib/BasePlugin')
-const { nanoid } = require('nanoid')
+const { nanoid } = require('nanoid/non-secure')
 const { Provider, RequestClient, Socket } = require('@uppy/companion-client')
 const emitSocketProgress = require('@uppy/utils/lib/emitSocketProgress')
 const getSocketHost = require('@uppy/utils/lib/getSocketHost')