diff --git a/kyuubi-common/src/main/scala/org/apache/kyuubi/service/authentication/InternalSecurityAccessor.scala b/kyuubi-common/src/main/scala/org/apache/kyuubi/service/authentication/InternalSecurityAccessor.scala
index 3c77634ef..62680e6a6 100644
--- a/kyuubi-common/src/main/scala/org/apache/kyuubi/service/authentication/InternalSecurityAccessor.scala
+++ b/kyuubi-common/src/main/scala/org/apache/kyuubi/service/authentication/InternalSecurityAccessor.scala
@@ -66,11 +66,11 @@ class InternalSecurityAccessor(conf: KyuubiConf, val isServer: Boolean) {
     }
   }
 
-  private[authentication] def encrypt(value: String): String = {
+  private[authentication] def encrypt(value: String): String = synchronized {
     byteArrayToHexString(encryptor.doFinal(value.getBytes))
   }
 
-  private[authentication] def decrypt(value: String): String = {
+  private[authentication] def decrypt(value: String): String = synchronized {
     new String(decryptor.doFinal(hexStringToByteArray(value)))
   }