# Firebase app check

**URL:** <https://community.thunkable.com/t/firebase-app-check/1723136>\
**Category:** Questions about Thunkable X\
**Created:** [February 8, 2022, 7:50pm UTC](https://community.thunkable.com/t/firebase-app-check/1723136 "2022-02-08T19:50:30Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![jared](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/jared/32/138473_2.png) [@jared](https://community.thunkable.com/u/jared)\
**Post date:** [February 9, 2022, 6:36pm UTC](https://community.thunkable.com/t/firebase-app-check/1723136/9 "2022-02-09T18:36:34Z")

</div>

> [@bibbi](#):
>
> To put an end to my hesitation, so I can authenticate the user with the sign in block and use the other blocks without too much fear?

absolutely. and if you started to use a backend sever, you could assign roles to your users and harness the power of IAM through firebase auth and really narrow down who has access to what docs.

Firebase can be used in HIPAA compliant systems when implemented the right way. It’s safe. What you need to worry about is your security rules. There [are](https://community.thunkable.com/t/firebase-rules-for-authenticated-users/1271480) [some good](https://community.thunkable.com/t/firebase-rules-for-secure-access-without-sign-in/1626508/6) threads about that in the community.

---

_[View the full topic](https://community.thunkable.com/t/firebase-app-check/1723136)._