diff --git a/database/users.go b/database/users.go
index 63e7957..5cebb8f 100644
--- a/database/users.go
+++ b/database/users.go
@@ -5,6 +5,7 @@ import (
 	"log"
 	"time"
 
+	"git.hatecomputers.club/hatecomputers/hatecomputers.club/utils"
 	_ "github.com/mattn/go-sqlite3"
 )
 
@@ -62,8 +63,9 @@ func MakeUserSessionFor(dbConn *sql.DB, user *User) (*UserSession, error) {
 	log.Println("making session for user", user.ID)
 
 	expireAt := time.Now().Add(time.Hour * 12)
+	sessionId := utils.RandomId()
 
-	_, err := dbConn.Exec(`INSERT OR REPLACE INTO user_sessions (id, user_id, expire_at) VALUES (?, ?, ?);`, user.ID, user.ID, time.Now().Add(ExpiryDuration))
+	_, err := dbConn.Exec(`INSERT OR REPLACE INTO user_sessions (id, user_id, expire_at) VALUES (?, ?, ?);`, sessionId, user.ID, time.Now().Add(ExpiryDuration))
 
 	if err != nil {
 		log.Println(err)
@@ -71,7 +73,7 @@ func MakeUserSessionFor(dbConn *sql.DB, user *User) (*UserSession, error) {
 	}
 
 	return &UserSession{
-		ID:       user.ID,
+		ID:       sessionId,
 		UserID:   user.ID,
 		ExpireAt: expireAt,
 	}, nil