Search code examples
androidsecurityfirebase-security

How can I secure my game from fraud and abuse?

I have a game uses Firestore, When the player complete the certain level the game will give him 50 points and will be save the data in Firestore.

Let's suppose someone did reverse engineering for my game and made change from 50 points to 1000 points in code and he rebuild the APK and play my game with the same Firestore database, Now when the player complete certain level the game will give him 1000 points and will be save the data in Firestore and that considered hacked data.

I don't care if someone did reverse engineering of my game and republish it as new game with his own Firestore, But I care about hackers who changed the data on my Firestore

How can I secure my game from fraud and abuse.

Solution

  • Did you hear about the Firebase App Check. It would restrict access to your Firebase serviced only from your App or Web Page.

    You can link your App with App Check so Firebase would only work with your App. In that case even a 100% reverse engeenered game would not work at all.