Firebase realtime database public rule

2
votes

What if I publish my android app using firebase realtime database in public mode,because I don't need any authentication.It says

Public access makes your database open to anyone, even people not using your app, so be sure to restrict your database again when you set up authentication.

I don't clearly understand how can anyone have access to my database if their app's are not connected to my database and they also doesn't have login passowrd for the firebase account.

Thx in advance

1
androidfirebasefirebase-realtime-databasefirebase-security

1 Answers

5
votes

A URL is associated with your database. The URL is shown at the top of the Database tab of the Firebase Console. For example:

https://your-project-id.firebaseio.com/

If the security rules for the database allow public access, anyone who knows the URL can read and write to the database using the Firebase REST API.