Cloud Firestore offers robust access management and authentication
through different mechanisms, depending on the client libraries you use.

## Mobile and web client libraries

> [!IMPORTANT]
> **Looking for AI assistance?** **[Install Firebase agent skills](https://firebase.google.com/docs/ai-assistance/agent-skills.md.txt)** for AI assistance with writing, validating, and deploying Firebase Security Rules. Agent skills work with AI coding agents like Gemini in Android Studio, Antigravity, Claude Code, Codex, and Cursor, etc.

For **mobile and web client libraries** , use Firebase Authentication and
Cloud Firestore Security Rules to handle serverless authentication,
authorization, and data validation. Learn how to use
[Cloud Firestore Security Rules](https://firebase.google.com/docs/firestore/enterprise/security/get-started.md.txt) to secure your data when using
the
Android, Apple, and Web client libraries.


Use [Firebase App Check](https://firebase.google.com/docs/app-check.md.txt) to help ensure that only your app
can access your Cloud Firestore data.
For your apps that use Cloud Storage for Firebase, use Cloud Firestore to define conditions for access to your Cloud Storage resources in database documents that can be [accessed by Cloud Storage Security Rules](https://firebase.google.com/docs/storage/security/rules-conditions.md.txt#enhance_with_firestore).

## Server client libraries

For **server client libraries** , use Identity and Access Management (IAM)
to manage access to your database. Learn how
to secure your data for the Java, Python, Node.js, and Go client libraries
with [IAM](https://cloud.google.com/firestore/docs/security/iam).