Anything sufficiently random to avoid automated guessing is going to be too long to enter on a keyboard.
On the German DHL package tracking page, you have to enter the recipient ZIP code before being shown recipient details like name and signature. The tracking code itself is 20 decimal characters, although it is not randomly generated.
Only thing that helps is a sufficiently random tracking hash/string.