# Secure your credentials and data

To operate fast and on the front-end, the Firebase plugin must expose your Firebase App credentials. This poses a security risk for your business, if not dealt correctly.

Follow the instructions below on how to secure your app and keep using the power of Firebase without any concerns.

{% embed url="<https://youtu.be/SdVx17vCfNw?si=vNSZZSbj2p1uKxxl>" %}

{% content-ref url="secure-your-credentials-and-data/restrict-your-api-key-to-your-domain" %}
[restrict-your-api-key-to-your-domain](https://estare.gitbook.io/firebase-auth-firestore-and-storage-plugin/setup/secure-your-credentials-and-data/restrict-your-api-key-to-your-domain)
{% endcontent-ref %}

{% content-ref url="secure-your-credentials-and-data/security-rules-on-firebase" %}
[security-rules-on-firebase](https://estare.gitbook.io/firebase-auth-firestore-and-storage-plugin/setup/secure-your-credentials-and-data/security-rules-on-firebase)
{% endcontent-ref %}