You can use <a href="http:&#x2F;&#x2F;hashids.org&#x2F;" rel="nofollow">http:&#x2F;&#x2F;hashids.org&#x2F;</a>. It obfuscated the real ids with reversible (but secret and un-guessable) transformation so on the server I deal with numeric ids (like 5) but the browser sees something like vgRg. I wrote up a bit more about this: <a href="https:&#x2F;&#x2F;quicknotes.io&#x2F;n&#x2F;vgRg-how-to-prevent-competitors-from-" rel="nofollow">https:&#x2F;&#x2F;quicknotes.io&#x2F;n&#x2F;vgRg-how-to-prevent-competitors-from...</a>