diff --git a/core/class/router.class.php b/core/class/router.class.php
index dddfdda6..cb22a9b7 100644
--- a/core/class/router.class.php
+++ b/core/class/router.class.php
@@ -11,7 +11,7 @@ class core extends common
 		parent::__construct();
 		// Token CSRF
 		if (empty($_SESSION['csrf'])) {
-			$_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(128));
+			$_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(64));
 		}
 
 		// Fuseau horaire