SECURITY

Public information.
Protected administration.

The website and dashboard have different jobs, with separate access boundaries.

The public website

This website contains product information and getting started guides. It does not provide anonymous access to the administrative dashboard.

The dashboard

Administrative dashboard access is restricted to authorized operators and requires administrator-provided credentials. Contact your deployment administrator for the correct access details.

Application access

Database, Storage, Authentication, Realtime and Functions use their own access controls. Configure database policies, bucket policies and application authentication for the data you expose.

Credentials

Use publishable keys where appropriate in clients. Keep secret keys and dashboard passwords private. Do not put them in public repositories, support issues or browser code.

Reporting concerns

Contact your deployment administrator privately about suspected vulnerabilities or exposed credentials. Avoid posting sensitive details in a public issue.