--- title: Firebase Will Require SSL Starting February 4th | daily.dev description: Starting February 4th, Firebase will require all database traffic to use SSL. JavaScript clients will always use SSL regardless of the protocol in the database... canonical: https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Firebase Will Require SSL Starting February 4th | daily.dev og:description: Starting February 4th, Firebase will require all database traffic to use SSL. JavaScript clients will always use SSL regardless of the protocol in the database... og:url: https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq og:image: https://api.daily.dev/og/posts/a59HAMYPQ.png og:image:alt: Firebase Will Require SSL Starting February 4th og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Firebase Will Require SSL Starting February 4th **[Firebase](https://daily.dev/sources/firebase-blog)** · 2 min read · 0 upvotes · 0 comments ## Summary Starting February 4th, Firebase will require all database traffic to use SSL. JavaScript clients will always use SSL regardless of the protocol in the database URL, and the non-HTTPS endpoint for the REST API and other services will be disabled. Developers must update all Firebase database references to use https:// before the switch, especially those using the REST API or Node.js client, which will stop working otherwise. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Do I need to change my Firebase database URLs to use https instead of http? Yes, starting February 4th 2013, Firebase requires all database references to begin with https://. Firebase disabled the non-HTTPS endpoint for the REST API and all other services, and JavaScript clients were updated to always use SSL regardless of the URL protocol specified. Apps using the REST API or Node.js client with http:// URLs stop working after the switch. _Track breaking infrastructure changes like Firebase's SSL cutover before they break production, on daily.dev._ ### Why did Firebase stop supporting unencrypted database connections? Firebase made SSL mandatory because it wanted data encrypted by default, matching practices already standard at Gmail, Facebook, and Twitter. Disabling unencrypted traffic protects developers from accidentally exposing their users' private data over plain HTTP connections to the database or REST API. _Developers weighing security defaults across backend services can follow moves like this on daily.dev._ ## Similar posts on daily.dev - [Google Online Security Blog: HTTPS by default](https://daily.dev/posts/google-online-security-blog-https-by-default-1zxxoy9oo) · Hacker News · 1 upvotes · 0 comments - [Chrome is about to show even more safety warnings](https://daily.dev/posts/chrome-is-about-to-show-even-more-safety-warnings-8qoi3uf0w) · The Verge · 0 upvotes · 0 comments --- Tags: [#backend](https://daily.dev/tags/backend), [#rest-api](https://daily.dev/tags/rest-api), [#firebase](https://daily.dev/tags/firebase) [View this post on daily.dev](https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Firebase Will Require SSL Starting February 4th","url":"https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq"},"datePublished":"2026-08-23T12:18:47.328Z","dateModified":"2026-08-23T12:33:59.418Z","description":"Starting February 4th, Firebase will require all database traffic to use SSL. JavaScript clients will always use SSL regardless of the protocol in the database...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7ed721de96163685d26ab7e314be3ebc?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7ed721de96163685d26ab7e314be3ebc?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Firebase","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Firebase","logo":"https://media.daily.dev/image/upload/s--i395oqZH--/f_auto,q_auto/v1787487448/logos/firebase-blog?_a=BAMAMicg0","url":"https://daily.dev/sources/firebase-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"backend,rest-api,firebase","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Firebase","item":"https://daily.dev/sources/firebase-blog"},{"@type":"ListItem","position":3,"name":"Firebase Will Require SSL Starting February 4th"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/firebase-will-require-ssl-starting-february-4th-a59hamypq#faq","mainEntity":[{"@type":"Question","name":"Do I need to change my Firebase database URLs to use https instead of http?","acceptedAnswer":{"@type":"Answer","text":"Yes, starting February 4th 2013, Firebase requires all database references to begin with https://. Firebase disabled the non-HTTPS endpoint for the REST API and all other services, and JavaScript clients were updated to always use SSL regardless of the URL protocol specified. Apps using the REST API or Node.js client with http:// URLs stop working after the switch. Track breaking infrastructure changes like Firebase's SSL cutover before they break production, on daily.dev."}},{"@type":"Question","name":"Why did Firebase stop supporting unencrypted database connections?","acceptedAnswer":{"@type":"Answer","text":"Firebase made SSL mandatory because it wanted data encrypted by default, matching practices already standard at Gmail, Facebook, and Twitter. Disabling unencrypted traffic protects developers from accidentally exposing their users' private data over plain HTTP connections to the database or REST API. Developers weighing security defaults across backend services can follow moves like this on daily.dev."}}]} ```