Firebase android and ios API keys compromised on github

Question

I am working on a flutter chat app on android and ios.

Unfortunately, I pushed my full working folder to my GitHub repository and later on received an email from GitHub that my API keys are compromised.

After I looked online, I found out that Firebase API keys are not secret, thus it doesn't matter exposing them.

Is this true? In the case that it's not, can anyone explain to me what to do? Thank you in advance!

Andreas Hadjimamas · Accepted Answer · 2024-07-17 08:08:41Z

1

Is always recommended to do not share any keys on public directories.
You probably got this warning email because your repository is public
Some recommendations for projects that are having secret keys are the following

Make the GitHub repository Private
Include the file path that has the key in the .gitignore file so it will not committed to the repository

answered Jul 17, 2024 at 8:08

Andreas Hadjimamas

3531 gold badge3 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Yazzine Over a year ago

Thank you for your answer. Should I regenerate the API keys or just let it as it is before including them in the .gitignore file ?

Andreas Hadjimamas Over a year ago

Yes regenerate them just to be sure

Collectives™ on Stack Overflow

Firebase android and ios API keys compromised on github

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related