diff --git a/demos/auth/authdemo.py b/demos/auth/authdemo.py
index cca7d378..3e666c88 100755
--- a/demos/auth/authdemo.py
+++ b/demos/auth/authdemo.py
@@ -34,7 +34,7 @@ class Application(tornado.web.Application):
             (r"/auth/logout", LogoutHandler),
         ]
         settings = dict(
-            cookie_secret="32oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/Vo=",
+            cookie_secret="__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__",
             login_url="/auth/login",
         )
         tornado.web.Application.__init__(self, handlers, **settings)
diff --git a/demos/blog/blog.py b/demos/blog/blog.py
index 94c7a67a..14544a56 100755
--- a/demos/blog/blog.py
+++ b/demos/blog/blog.py
@@ -51,7 +51,7 @@ class Application(tornado.web.Application):
             static_path=os.path.join(os.path.dirname(__file__), "static"),
             ui_modules={"Entry": EntryModule},
             xsrf_cookies=True,
-            cookie_secret="11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/Vo=",
+            cookie_secret="__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__",
             login_url="/auth/login",
             autoescape=None,
         )
diff --git a/demos/chat/chatdemo.py b/demos/chat/chatdemo.py
index 48c82f8a..82aafd65 100755
--- a/demos/chat/chatdemo.py
+++ b/demos/chat/chatdemo.py
@@ -38,7 +38,7 @@ class Application(tornado.web.Application):
             (r"/a/message/updates", MessageUpdatesHandler),
         ]
         settings = dict(
-            cookie_secret="43oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/Vo=",
+            cookie_secret="__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__",
             login_url="/auth/login",
             template_path=os.path.join(os.path.dirname(__file__), "templates"),
             static_path=os.path.join(os.path.dirname(__file__), "static"),
diff --git a/demos/facebook/facebook.py b/demos/facebook/facebook.py
index c57cb217..341384c0 100755
--- a/demos/facebook/facebook.py
+++ b/demos/facebook/facebook.py
@@ -39,7 +39,7 @@ class Application(tornado.web.Application):
             (r"/auth/logout", AuthLogoutHandler),
         ]
         settings = dict(
-            cookie_secret="12oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/Vo=",
+            cookie_secret="__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__",
             login_url="/auth/login",
             template_path=os.path.join(os.path.dirname(__file__), "templates"),
             static_path=os.path.join(os.path.dirname(__file__), "static"),
diff --git a/demos/websocket/chatdemo.py b/demos/websocket/chatdemo.py
index 60fb956e..e2bd5f64 100755
--- a/demos/websocket/chatdemo.py
+++ b/demos/websocket/chatdemo.py
@@ -39,7 +39,7 @@ class Application(tornado.web.Application):
             (r"/chatsocket", ChatSocketHandler),
         ]
         settings = dict(
-            cookie_secret="43oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/Vo=",
+            cookie_secret="__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__",
             template_path=os.path.join(os.path.dirname(__file__), "templates"),
             static_path=os.path.join(os.path.dirname(__file__), "static"),
             xsrf_cookies=True,