title: Firebase Realtime Database Security for Private Single-Developer User
body: <p>I have a React app which I developed for my own usage in localhost development mode.</p>
  <ul>
  <li>The app stores some data to a firebase realtime database which I created just for the project.</li>
  <li>Has no authentication, since only I use it in development mode.</li>
  </ul>
  <p>The rules on the firebase database are the default ones:</p>
  <pre><code>{
    &quot;rules&quot;: {
      &quot;.read&quot;: true,
      &quot;.write&quot;: true
    }
  }
  </code></pre>
  <p>Thus firebase alerts me to the usual: <code>'Your security rules are defined as public, so anyone can steal, modify...' - warning</code>.</p>
  <p>My understanding is that in this case, the only way someone could get access to my data is if they got hold of information about the firebase instance, such as apiKey, database URL, authDomain. Is this true?  (Or is there some other straightforward way people can get access to the data in this case, obviously not talking about hacking my computer/google account, etc.</p>
  <p>This data is important to me, so basically I am wondering if my current practice is secure.</p>
  <p>PS: I do understand how to set up firebase database security for a 'normal' user app.  However, in this particular instance, I believe it is not needed, is this correct?</p>
  <p>Thanks very much.</p>