Firebase fundamentals
Understand the role of authentication, data, and rules.
Choose a service for a specific job
Authentication establishes identity. Firestore and Realtime Database store application data. Hosting serves your website. Using one does not require using all of them.
Rules protect data
Client-side checks alone cannot protect a database. Define access rules, test the allowed and denied cases, and give users access only to the data they should see.
Keep privileged credentials on trusted systems
Service-account private keys belong in a trusted server environment. Never package them in Android resources, website assets, or public code snippets.
Try it yourself
Describe which user should be able to read, create, update, and delete each note before designing the database rules.
