Is My Supabase Anon Key Leaked? What's Actually at Risk
No: the anon/publishable key is public by design. The real risks: tables without RLS, broad grants, or a secret key in your frontend. Check your own app.
Last reviewed · Read the guide →
Supabase security guides
Short, sourced guides for apps built with Lovable, Bolt or Supabase. Every SQL snippet is per table and least privilege — never a bulk grant.
Supabase 42501 Permission Denied After Oct 30: Safe Fix
New Supabase tables now need an explicit GRANT, or the Data API returns 42501. Here's the per-table fix with RLS, and why to skip the bulk rollback.
Last reviewed · Read the guide →