title: Is UUID.randomUUID() suitable for use as a one-time password?
body: <p>As <a href="https://stackoverflow.com/questions/212758/best-way-for-confirmation-email-links-to-submit-id">previous discussed</a>, confirmation emails should have a unique, (practically) un-guessable code--essentially a <a href="http://en.wikipedia.org/wiki/One-time_password" rel="noreferrer">one-time password</a>--in the confirmation link. </p>
  
  <p><a href="http://docs.oracle.com/javase/6/docs/api/java/util/UUID.html#randomUUID()" rel="noreferrer">The UUID.randomUUID() docs</a> say: </p>
  
  <blockquote>
    <p>The UUID is generated using a cryptographically strong pseudo random
    number generator.</p>
  </blockquote>
  
  <p>Does this imply that the the UUID random generator in a properly implemented JVM is suitable for use as the unique, (practically) un-guessable OTP?</p>