Pretty much :) I don't know how would I classify a short UUID, but they should follow the same precautions as if it was a password composed only of lowercase al

Pretty much :) I don't know how would I classify a short UUID, but they should follow the same precautions as if it was a password composed only of lowercase alphanumeric chars. The longer you can afford, the better.