Should I be obfuscating database IDs from my users?

No, you’re just making extra work for yourself.

As long as you’re doing enough testing that changing an ID here or there won’t give the users access to something they shouldn’t then you’re fine having the IDs visible.

In some situations it can be beneficial to hide them or have non-sequential numbers, or maybe not starting counting from zero. For example if someone got order number 3 they might start asking questions…

Leave a Comment