randomness of hash token in password reset link

I want to know that what are points to be keep in mind while creating the hash token for my password reset links.

i want that to be secure like un-predictable for an attacker