# Api Key lost when accessing the project through a shareable link

**URL:** <https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572>\
**Category:** Questions about Thunkable X\
**Created:** [April 15, 2021, 7:54pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572 "2021-04-15T19:54:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![aboisiermichaudza9g](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/aboisiermichaudza9g/32/99003_2.png) [@aboisiermichaudza9g](https://community.thunkable.com/u/aboisiermichaudza9g)\
**Post date:** [April 15, 2021, 7:54pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572/1 "2021-04-15T19:54:43Z")

</div>

Hi!

I have a project which uses a firebase realtime db. When I share the project and access it through a shareable link, the API key and the database URL are stripped. I am confused, because the “Share project by link” modal specifies “Users who click this link will get a copy of this project and all its media assets and data, including **API keys & passwords.** ”.

I am using the beta version of thunkable and am under a free plan. My project is public.

Is this a bug? Thanks!

---

<div class="post-metadata">

**Author:** ![aanshi6](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/aanshi6/32/101076_2.png) [@aanshi6](https://community.thunkable.com/u/aanshi6)\
**Post date:** [April 15, 2021, 8:26pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572/2 "2021-04-15T20:26:52Z")

</div>

No, I don’t think this is a bug, but rather a safety feature. You shouldn’t share your API Key with anyone.

---

<div class="post-metadata">

**Author:** ![aboisiermichaudza9g](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/aboisiermichaudza9g/32/99003_2.png) [@aboisiermichaudza9g](https://community.thunkable.com/u/aboisiermichaudza9g)\
**Post date:** [April 15, 2021, 8:44pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572/3 "2021-04-15T20:44:51Z")

</div>

Sharing the API key and the database URL does not cause a safety issue as these are bundled with the app anyways. The app needs these to communicate with the database. If this is a safety feature, it is security by obscurity unless the app isn’t published.

---

<div class="post-metadata">

**Author:** ![tatiang](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/tatiang/32/55482_2.png) [@tatiang](https://community.thunkable.com/u/tatiang)\
**Post date:** [April 15, 2021, 9:50pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572/4 "2021-04-15T21:50:06Z")

</div>

@domhnallohanlon or @jane can confirm this but I believe the message about the API key being included is outdated. I think it gets stripped from all shared projects. And yes, it’s for security purposes. Many APIs have limits to how many calls can be made per day and many also charge fees for each call.

When you publish your app, it will have the private API key included. It’s just the shared links that don’t have that.

---

<div class="post-metadata">

**Author:** ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)\
**Post date:** [November 8, 2024, 1:25pm UTC](https://community.thunkable.com/t/api-key-lost-when-accessing-the-project-through-a-shareable-link/1226572/5 "2024-11-08T13:25:09Z")

</div>