How to hide an API key

Forum|Forum|6 years ago
July 3, 2019
1 reply
2094 views

Using Dreamweaver CC 2019 Google Maps now requires the API key be embedded in the js script source, for their free maps so I have had to add API keys to a couple of my sites. They warn that these API keys should be hidden to avoid misuse. How to I achieve this?

Here is the call out: <script src="//maps.googleapis.com/maps/api/js?key=MY_API_KEY&v=3.exp&sensor=false"></script>

I need to keep the info relating to my API key hidden. Eventually, I want to switch the maps out with another free map that doesn't need to be monitored so closely to avoid fees and abuse. In the meantime, I am hoping for a quick fix to keep the key hidden.

This topic has been closed for replies.

Correct answer Nancy OShea

You cannot hide code in static HTML files. But you can hide code within variables inside server-side scripts like PHP. See Google's Best Practices

Google Maps Platform | Google Developers

Nancy OShea

Community Expert

You need to set-up API restrictions. See the Google documentation.

Using API Keys | Authentication | Google Cloud

Nancy O'Shea— Product User & Community Expert

M

My Winter GuitarAuthor

Known Participant

Thank you. Yes, Google Support did suggest setting restrictions to 100,000 to avoid abuse that would incur costs. Although I have not found where that setting is in their restrictions section. But - They also said I needed to "hide" the key that is showing up in my code. We didn't use to have to add the key for free maps. But Google support said that now, we do. But the tech warned that I should definitely "hide" it so it doesn't get abused. I'm thinking of removing the map since having it seems to open us up to credit card abuse via this key that should not incur any costs. Is there a way in DreamWeaver CC 2019 to hide code, so that when someone uses a developer tool in a browser to view the code, they can't see it? This is actually what my question boils down to. Thanks for trying to help!

Nancy OShea

Correct answer

Community Expert

You cannot hide code in static HTML files. But you can hide code within variables inside server-side scripts like PHP. See Google's Best Practices

Google Maps Platform | Google Developers

Nancy O'Shea— Product User & Community Expert

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded