diff --git a/plain/plain/cli/cli.py b/plain/plain/cli/cli.py
index dcf2c0c3bc..6c16788c1e 100644
--- a/plain/plain/cli/cli.py
+++ b/plain/plain/cli/cli.py
@@ -15,6 +15,7 @@
 from plain import preflight
 from plain.assets.compile import compile_assets, get_compiled_path
 from plain.packages import packages
+from plain.utils.crypto import get_random_string
 
 from .formatting import PlainContext
 from .packages import EntryPointGroup, InstalledPackagesGroup
@@ -406,6 +407,18 @@ def setting(setting_name):
         click.secho(f'Setting "{setting_name}" not found', fg="red")
 
 
+@plain_cli.group()
+def utils():
+    pass
+
+
+@utils.command()
+def generate_secret_key():
+    """Generate a new secret key"""
+    new_secret_key = get_random_string(50)
+    click.echo(new_secret_key)
+
+
 class AppCLIGroup(click.Group):
     """
     Loads app.cli if it exists as `plain app`