API Design · Middle · Question 7 of 75

Why might an API use UUIDs or opaque string IDs instead of auto-increment integers in URLs?

1Integers can't be used in URLs
2UUIDs make requests faster
✓Correct answer: They don't reveal counts or allow guessing neighbors, and can be generated without a central sequence

Explanation

Opaque IDs are not a security measure by themselves; authorization checks are still required on every access.

Further reading

Test yourself

Take the API Design · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.