This is what Hashids was built for - https://hashids.org/

> [A library] that generates short, unique, non-sequential ids from numbers.

> It converts numbers like 347 into strings like “yr8”, or array of numbers like [27, 986] into “3kTMd”.

> You can also decode those ids back. This is useful in bundling several parameters into one or simply using them as short UIDs.

Of course, you shouldn't use this as a means of any real security. However, neither should you rely on hiding ids through randomness as security either. If someone gets their hands on an id that doesn't belong to them - they still should not be able to do anything with it.

With that in mind, you'll get even better performance with a simple url-safe base64 scheme.