I'm implementing a model which I'll have to reupdate the users, so I want to deliver a unique link to the users and after confirmed the update, I expire that link, so I prevent reusing that link.

How do I generate a random secure token for that?

The performance of checking if the token was already visited isn't a problem, it will not affect a huge number of users.