diff --git a/dsc.cabal b/dsc.cabal
--- a/dsc.cabal
+++ b/dsc.cabal
@@ -3,7 +3,7 @@
 -- see: https://github.com/sol/hpack
 
 name:                dsc
-version:             0.1.3
+version:             0.2.0
 synopsis:            Helper functions for setting up Double Submit Cookie defense for forms
 description:         See README at <https://github.com/qoelet/dsc#readme>
 homepage:            https://github.com/qoelet/dsc#readme
diff --git a/src/Web/Csrf.hs b/src/Web/Csrf.hs
--- a/src/Web/Csrf.hs
+++ b/src/Web/Csrf.hs
@@ -50,10 +50,7 @@
 
 mkCsrf :: ByteString -> ByteString -> ByteString -> Csrf
 mkCsrf keyBS c t
-  = runCheck key (Csrf (MkToken c) (MkToken t) Nothing)
-  where
-    key :: ByteString
-    key = decodeLenient keyBS
+  = runCheck keyBS (Csrf (MkToken c) (MkToken t) Nothing)
 
 unMkToken :: Token -> ByteString
 unMkToken (MkToken x) = x