0

What all security measure I should take to make sure my API keys and firebase config information remains safe in my app.

Currently my firebase firestore DB rule is allow read, write: if true; should I change it to something else ? My app does have anonymous user authentication.

Are there any other security measures I should take ?

Aakash Rathee
  • 523
  • 3
  • 17
  • The configuration data of Firebase is not a security mechanism. See https://stackoverflow.com/questions/37482366/is-it-safe-to-expose-firebase-apikey-to-the-public. For how to secure access, see this answer that I just wrote: https://stackoverflow.com/questions/65969299/firestore-security-for-non-authenticated-access – Frank van Puffelen Jan 30 '21 at 15:48
  • Does this answer your question? [Firestore Security for non-authenticated access](https://stackoverflow.com/questions/65969299/firestore-security-for-non-authenticated-access) – Oliver Aragon Feb 15 '21 at 16:14

0 Answers0