diff --git a/src/calibre/library/server/utils.py b/src/calibre/library/server/utils.py
index db90e42fe7..b69d3e6a72 100644
--- a/src/calibre/library/server/utils.py
+++ b/src/calibre/library/server/utils.py
@@ -93,7 +93,7 @@ class AuthController(object):
         self.cookie_name = 'android_workaround'
 
     def hashit(self, raw):
-        return hashlib.sha1(raw).hexdigest()
+        return hashlib.sha256(raw).hexdigest()
 
     def __call__(self, func, allow_cookie_auth):