3 ms·A URL with a long random token is unguessable, same as your login token/session token is unguessable.by wolf550e 10y agoA URL with a long random token is unguessable, same as your login token/session token is unguessable.