PHP - Generating tokens for transactions

Question

What would be a safe and suitable way to produce one-time use only, unique tokens like Stripe for a banking application (for production only) to represent accounts and transactions?

Would random bytes() work for me?

The tokens should have alphanumeric characters rather than just digits. For instance, the appearance of a Stripe token is tok 382r1O2IZ7IgsfwNFATX4xax.

Answer 1

To convert the bytes into a base 62 string, use the bin2hex function.

$token = bin2hex(random_bytes(16)); //generates a crypto-secure 32 characters long 

Simply adding a string to the beginning will prefix this. I hope this helps you.