Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://firebase.google.com/docs/app-check below:

Firebase App Check

Stay organized with collections Save and categorize content based on your preferences.

Firebase App Check

plat_ios plat_android plat_web plat_flutter

App Check helps protect your app backends from abuse by preventing unauthorized clients from accessing your backend resources. It works with both Google services (including Firebase and Google Cloud services) and your own custom backends to keep your resources safe.

With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

• Requests originate from your authentic app
• Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to the APIs you specify. When you enable App Check enforcement, requests from clients without a valid attestation will be rejected, as will any request originating from an app or platform you haven't authorized.

App Check has built-in support for using the following services as attestation providers:

• DeviceCheck or App Attest on Apple platforms
• Play Integrity on Android
• reCAPTCHA Enterprise on web apps.

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check works with the following Google services:

You can also use App Check to protect your non-Google custom backend resources, like your own self-hosted backend.

Learn how to get started

When you enable App Check for a service and include the client SDK in your app, the following happens periodically:

1. Your app interacts with the provider of your choice to obtain an attestation of the app or device's authenticity (or both, depending on the provider).
2. The attestation is sent to the App Check server, which verifies the validity of the attestation using parameters registered with the app, and returns to your app an App Check token with an expiration time. This token might retain some information about the attestation material it verified.
3. The App Check client SDK caches the token in your app, ready to be sent along with any requests your app makes to protected services.

A service protected by App Check only accepts requests accompanied by a current, valid App Check token.

App Check relies on the strength of its attestation providers to determine app or device authenticity. It prevents some, but not all, abuse vectors directed towards your backends. Using App Check does not guarantee the elimination of all abuse, but by integrating with App Check, you are taking an important step towards abuse protection for your backend resources.

App Check and Firebase Authentication are complementary parts of your app security story. Firebase Authentication provides user authentication, which protects your users, whereas App Check provides attestation of app or device authenticity, which protects you, the developer. App Check guards access to your Google backend resources and custom backends by requiring API calls to contain a valid App Check token. These two concepts work together to help secure your app.

Your use of App Check is subject to the quotas and limits of the attestation providers you use.

• DeviceCheck and App Attest access is subject to any quotas or limitations set by Apple.

• Play Integrity has a daily quota of 10,000 calls for its Standard API usage tier. For information on raising your usage tier, see the Play Integrity documentation.

• reCAPTCHA Enterprise is no-cost for 10,000 assessments each month, and has a cost beyond that. See reCAPTCHA pricing.

Ready to get started?

DeviceCheck App Attest

Play Integrity

reCAPTCHA Enterprise

Default providers

Default providers

Default providers

Custom providers

Select your platform:

iOS+ Android Web Flutter Unity C++

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-06-27 UTC.

[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-27 UTC."],[],[]]

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4