Strings::random uses openssl_random_pseudo_bytes, mcrypt_create_iv or /dev/urandom is available. openssl_random_pseudo_bytes is not used on Windows for PHP < 5.4, because is terrible slow.