Firebase Auth buys speed with managed identity

Firebase Auth is the fast path for Google-flavored identity.

It gives a web app email/password, Google social sign-in, user records, client SDKs, and email verification without building password storage or recovery flows yourself. For prototypes and MVPs, that removes a large security burden.

The tradeoff is ownership and control.

Advanced user management, custom whitelists, bulk user access, or sensitive authorization checks move to trusted server code with the Firebase Admin SDK, Cloud Functions, Workers, or another backend. The client SDK should only know the current user.

Firebase is convenient identity infrastructure, not a reason to put admin power in the browser.

Related:

• Firebase Auth SDK. Social Login and email verification.
• Social Auth for any SaaS x Firebase
• Static sites need server-side auth for real protection
• Just Journal via SSG repo
• Firebase setup notes
• Firebase users pull notes
• Slidev Editor Firebase auth branch