Skip to main content

Secure Your Firebase Project

Last Updated: 28 Apr 2026

Firebase Security Rules​

Firebase Security Rules are required to protect the data in Firebase Realtime Database, Firestore and Firebase Cloud Storage.

Visit Security Rules Documentation: https://firebase.google.com/docs/rules

Restricting API Key​

Restricting API Keys disallow others to run an app on their own website using your Firebase API Keys.

(However, this doesn't make your database or Cloud Storage secure. You need to deploy Firebase Security Rules for data protection.)

  1. Go to https://console.cloud.google.com/apis/credentials
  2. Choose your required Firebase Project and your Firebase API Key from the list.
  3. Select an Application restriction controls
  4. Add an item