All monotonically increasing (auto-increment, k-sortable), and timestamp-based ids share the security issues

[Dominik Rabus]

Hey Guys,

Just checking here if nanoid() is safe to use, or is it also affected by these security issues?

https://github.com/paralleldrive/cuid

• Unauthorized password reset via guessable ID
• Unauthorized access to private GitLab issues via guessable ids
• Unauthorized password reset via guid

[Andrey Sitnik]

This is why Nano ID is using hardware random generator to have unguessable IDs. Just don't reduce ID length and keep some timeout between tries.