diff --git a/internal/models/api_token.go b/internal/models/api_token.go
index 648d5fa..6697fb8 100644
--- a/internal/models/api_token.go
+++ b/internal/models/api_token.go
@@ -15,7 +15,7 @@ import (
 )
 
 // tokenRandomBytes is the number of random bytes for token generation.
-const tokenRandomBytes = 16
+const tokenRandomBytes = 32
 
 // tokenPrefix is prepended to generated API tokens.
 const tokenPrefix = "upaas_"