# Securing Firebase with SMS verification or Email help needed

**URL:** https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341
**Category:** Questions about Thunkable X
**Tags:** firebase
**Created:** [March 24, 2019, 7:48pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341 "2019-03-24T19:48:45Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [March 24, 2019, 7:48pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/1 "2019-03-24T19:48:46Z")

</div>

(I edited this cause it was a useless post, sorry for that).

I really need some help with firebase as I’d like to secure the user data without requiring him to use the email.

I’ ve successfully implemented a 2 steps verification process through SMS and I don’t want to use the email, is it possible to have a secure firebase without email login?

---

<div class="post-metadata">

### Author: ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)
#### Post date: [March 25, 2019, 9:35am UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/2 "2019-03-25T09:35:18Z")

</div>

Hi @maxb, welcome to the Thunkable community.

One quick note, you should only use #thunkable-cross-tutorials if you have written a tutorial about using Thunkable X, so I’ve moved this to #thunkable-cross

When you say:

> [@maxb](#):
>
> I’ve done all the correct steps

do you mean you’ve followed all of [these steps](https://docs.thunkable.com/realtime-db)?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [June 17, 2019, 3:10pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/3 "2019-06-17T15:10:31Z")

</div>

Thx @domhnallohanlon and sorry, I edited this post cause I was just a noob ^^

What I need is to let the user access his data and only his and make all the data secure from outside attacks.

How can I? ☹

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [May 2, 2019, 3:42pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/4 "2019-05-02T15:42:13Z")

</div>

I’d like to have firebase authentication through SMS OTP, without using the email (slower and less userfriendly), is it possible in Thunk X?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [June 10, 2019, 12:34pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/5 "2019-06-10T12:34:36Z")

</div>

I am using an external webapi SMS service that has SMS OTP verification service (paid) but I would like to use it to secure firebase so that every user can access only to its data.

Is it possible?

Please help.

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 9, 2019, 2:27pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/6 "2019-07-09T14:27:24Z")

</div>

Why is this so complicate ☹?

I’m dwelling on #thunkable-cross and I don’t know what to do, ad I’m even trying to have an SMS OTP security only, I wanna cry 😭

---

<div class="post-metadata">

### Author: ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)
#### Post date: [July 9, 2019, 2:29pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/7 "2019-07-09T14:29:13Z")

</div>

@maxb this is a tutorial for Classic - which platform are you using?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 9, 2019, 2:33pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/8 "2019-07-09T14:33:46Z")

</div>

@domhnallohanlon I was looking for any help possible, I’m on #thunkable-cross

---

<div class="post-metadata">

### Author: ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)
#### Post date: [July 9, 2019, 2:35pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/9 "2019-07-09T14:35:59Z")

</div>

Have you created a topic about this in #thunkable-cross somewhere?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 9, 2019, 2:38pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/10 "2019-07-09T14:38:08Z")

</div>

I edited the title of this old post,

> [@Securing Firebase with SMS verification or Email help needed](http://community.thunkable.com/t/i-really-need-help-understanding-firebase-security-help-please/73341):
>
> (I edited this cause it was a useless post, sorry for that). I really need some help with firebase as I’d like to secure the user data without requiring him to use the email. I’ ve successfully implemented a 2 steps verification process through SMS and I don’t want to use the email, is it possible to have a secure firebase without email login?

and also made this one

> [@Firebase SMS security authentication without email possibile?](http://community.thunkable.com/t/firebase-sms-security-authentication-without-email-possibile/75692):
>
> I’d like to have firebase authentication through SMS OTP, without using the email (slower and less userfriendly), is it possible in Thunk X?

but I had no luck at all ☹☹☹

---

<div class="post-metadata">

### Author: ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)
#### Post date: [July 9, 2019, 2:46pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/11 "2019-07-09T14:46:56Z")

</div>

Got it.

Ok - a couple of things.

1. Please don’t post about the same question in multiple topics. I’ve merged your three topics into a single one now.

2. Have you seen anyone else do this? If you have docs with sms-only verification then please share them so that people who are familiar with this can guide you.

3. Why does your app _have_ to have this feature? If it was me I would be more concerned with launching my app and building a user base. If you find that one or two users have duplicate accounts then you can manually delete them. If it gets to be too big a number then perhaps you need to ask some questions about the type of app you are building?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 9, 2019, 2:52pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/12 "2019-07-09T14:52:44Z")

</div>

1 - Ok, sorry.

2 - I’ve searched #thunkable-cross and found nothing ‘firebase official’ about SMS OTP, but I managed to find a third party service that can send the OTP but I don’t know if I can use that to secure firebase.

3 - I’d prefer to use the more user friendly SMS OTP instead of the complicate email sign in as the userbase should be any age.  
What do you mean here?

> [@domhnallohanlon](#):
>
> If it was me I would be more concerned with launching my app and building a user base

I’m concerned to make firebase secure so that hackers can’t access the data

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 26, 2019, 3:17pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/13 "2019-07-26T15:17:12Z")

</div>

Anybody can help?

---

<div class="post-metadata">

### Author: ![kartik\_old](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/kartik_old/32/28305_2.png) [@kartik\_old](https://community.thunkable.com/u/kartik_old)
#### Post date: [July 27, 2019, 12:57pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/14 "2019-07-27T12:57:48Z")

</div>

Why don’t u apply a ID login in your app?  
Generate an ID for each user, then secure the user;s data with login id…  
the user with the correct login id can only view the data…

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 27, 2019, 1:00pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/15 "2019-07-27T13:00:13Z")

</div>

That’s the last resource, but I think that I will have to do it.

I prefer to avoid email log in and only use SMS OTP as it’s easier and faster, but I don’t know if I can authentcate the user with only that in thunkable

---

<div class="post-metadata">

### Author: ![kartik\_old](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/kartik_old/32/28305_2.png) [@kartik\_old](https://community.thunkable.com/u/kartik_old)
#### Post date: [July 27, 2019, 1:01pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/16 "2019-07-27T13:01:07Z")

</div>

> [@maxb](#):
>
> SMS OTP as it’s easier and fast

did u use it?

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 27, 2019, 1:01pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/17 "2019-07-27T13:01:34Z")

</div>

With a third party service, not the firebase one

---

<div class="post-metadata">

### Author: ![kartik\_old](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/kartik_old/32/28305_2.png) [@kartik\_old](https://community.thunkable.com/u/kartik_old)
#### Post date: [July 27, 2019, 1:02pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/18 "2019-07-27T13:02:37Z")

</div>

Ok… I can’t get your concrete problem…  
Can u explain me what’s yr one & only problem?

Thanks!

---

<div class="post-metadata">

### Author: ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)
#### Post date: [July 27, 2019, 1:04pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/19 "2019-07-27T13:04:15Z")

</div>

authenticate the user so he uploads his data and can’t see other users data

---

<div class="post-metadata">

### Author: ![kartik\_old](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/kartik_old/32/28305_2.png) [@kartik\_old](https://community.thunkable.com/u/kartik_old)
#### Post date: [July 27, 2019, 1:05pm UTC](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341/20 "2019-07-27T13:05:13Z")

</div>

> [@maxb](#):
>
> and can’t see other users data

& if u don’t authenticate him, how will he be able to see other’s data?

[Next page](https://community.thunkable.com/t/securing-firebase-with-sms-verification-or-email-help-needed/73341.md?page=2)
