Keeping API keys secure with Supabase vault

Allowing your API keys to be intercepted, read by users or worse, malicious actors, can be catastrophic. Knowing how to keep API keys secure with Supabase Vault, behind an encrypted wall, can allow you to focus on app development and not worry about potentially harmful leaks.

In this video we have two methods of using the Supabase vault to store and retrieve our API keys when we need them in our Flutterflow applications. The first is not ideal and the risk is outlined. The second is the most secure, keeping all of your API activity away from your client app.

The code examples used can be downloaded from this link:

[pcnerd]

It's hard to find video that talk about the security in production code. Thank you so much!

[Sankn-]

wow chatgpt gave me the link to this video haha

[EmblazNOR]

Brilliant! Thank you so much. Im wondering if the keys are safe when using firebase and toggling "make private" in the advanced api settings?

[MyInspireSphere]

Brilliant video. Thank you.
I am using firebase for my app. Have the API calls set to private (cloud functions).. I wanted to use the secrets manager to keep my keys but can’t figure how to do that unless I manually modify the cloud function auto generated by FlutterFlow. Any thoughts on that?