diff --git a/apps/common/utils/random.py b/apps/common/utils/random.py
index db3b39c05..fae1d80bd 100644
--- a/apps/common/utils/random.py
+++ b/apps/common/utils/random.py
@@ -35,7 +35,7 @@ def random_string(length, lower=True, upper=True, digit=True, special_char=False
 
     if special_char:
         spc = random.choice(string_punctuation)
-        i = random.choice(range(len(password)))
+        i = random.choice(range(1, len(password)))
         password[i] = spc
 
     password = ''.join(password)