diff --git a/pkgs/web_socket_channel/CHANGELOG.md b/pkgs/web_socket_channel/CHANGELOG.md
index 3d75aaf..b7f318e 100644
--- a/pkgs/web_socket_channel/CHANGELOG.md
+++ b/pkgs/web_socket_channel/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 2.4.5
+
+* use secure random number generator for frame masking.
+
 ## 2.4.4
 
 * Require Dart `^3.3`
diff --git a/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart b/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart
index 0616caa..cf74bb2 100644
--- a/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart
+++ b/pkgs/web_socket_channel/lib/src/copy/web_socket_impl.dart
@@ -25,7 +25,7 @@
 
 const String webSocketGUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';
 
-final _random = Random();
+final _random = Random.secure();
 
 // Matches _WebSocketOpcode.
 class _WebSocketMessageType {
diff --git a/pkgs/web_socket_channel/pubspec.yaml b/pkgs/web_socket_channel/pubspec.yaml
index 99301cb..0e44661 100644
--- a/pkgs/web_socket_channel/pubspec.yaml
+++ b/pkgs/web_socket_channel/pubspec.yaml
@@ -1,5 +1,5 @@
 name: web_socket_channel
-version: 2.4.4
+version: 2.4.5
 description: >-
   StreamChannel wrappers for WebSockets. Provides a cross-platform
   WebSocketChannel API, a cross-platform implementation of that API that