Is Firebase Auth encrypted?

Unfortunately, Firebase is not HIPAA compliant . Firebase has not implemented all of the physical, technical, and administrative safeguards required under HIPAA.

Data encryption Firebase services encrypt data in transit using HTTPS and logically isolate customer data.

If you have users in the EU and are wondering about compliance with the GDPR, the answer is yes, the use of Firebase services almost certainly means you are collecting or processing data that is regulated by the GDPR .

0 providers are the most secure . If you use Firebase’s managed authentication features, the OAuth 2.0 / OpenID Connect provider options (Google, Facebook, etc.) are the most secure. You should support one or more of these providers if you can (depending on your user base).

In a word, yes. As stated by one of the Firebase team engineers, your Firebase API key only identifies your project with Google’s servers. It is not a security risk to expose it .