DEV Community

Discussion on: Firebase API Key Security Issue – for Custom Sign Up/Login

Collapse
 
lamba3 profile image
LaMbA3

I think that api are publicly available and that is somewhat okay, that is why there are rules that control access to database.

Collapse
 
sowmo0509 profile image
Sowmo0509

Hey man! Thanks for your quick response. But, guess, if someone steal my API keys and use them in their website or something, and they are just letting users randomly spam with data– that's an issue there, right? Or am I just overthinking about it? Need to understand.