Firebase App Check helps protect Firebase backend resources from abuse by verifying that requests originate from legitimate, unmodified apps. It works alongside other Firebase services to prevent unauthorized access, such as billing fraud or phishing attacks. By integrating app attestation with safety net, device check, or reCAPTCHA, it ensures only trusted apps can access your services. Available across Android, iOS, Web, macOS, and Windows, it enhances security without requiring significant code changes. Ideal for apps handling sensitive data or monetized services.
Use cases
- Protecting Firebase APIs from abuse
- Preventing billing fraud in monetized apps
- Securing backend resources against unauthorized access
- Mitigating phishing risks
- Enforcing app authenticity in multi-platform apps
Key features
- App attestation via SafetyNet, DeviceCheck, or reCAPTCHA
- Integration with Firebase services
- Support for multiple platforms
- Minimal code changes required
- Real-time verification of app integrity
Suitable for
- Apps with sensitive data
- Monetized applications
- Services vulnerable to abuse
- Multi-platform apps
- High-security requirements
Considerations
- Requires setup of App Check providers
- Additional configuration for each platform
- May impact performance slightly
- Not a standalone security solution
- Dependent on Firebase ecosystem
