2:53 : Why do I have to add both http and https? Why not the domain without any prefix and allow both? Why not assume they're one and the same (applies to most), instead of assuming there's two different entities?, and let those who actually have two different entities specify. 2:40 : You replied to someone below that if he doesn't apply any API restrictions anyone can use his API. Then *WHAT* is the http application restriction good for?
... but you do say on page "if you want static map and street view restricted please disable these API's". So... how do I do that, if by clicking I'm enabling?, lol.
3:46 : To add API restrictions, click "Restrict key". Then, from the "select API's" drop-down menu click all the API to which you want to enable acces to that key". This is disastruous! :)) I would have assumed I'm selecting the ones I don't want access for, not the ones I'm giving access to. It'd make more sense, especially with previous similar settings options on all gadgets in the past. It's classical. First I'm selecting to restrict, you give me a list and I choose what to restrict. It's an "ok!, we got it that you want to restrict, not tell us what you want to restrict". ... whereas, you're here saying I'm selecting what to not restrict. And you don't even mention it on the page.
im developing something with python, im trying to run a code and it seems like my key doesnt work beacuse the object giving me errors.... im using the api restriction... can u help ??
Hi, which application restriction should I choose for use with a chrome extension please? Also, is there any guidance on how to hide api keys/prevent users from accessing my projects api key where it is visible in client side code? Also :) what safeguards are there for preventing malicious use of api keys as I'm not sure what precautions I may need to take? I'm using the youtube data api but I guess it's the same principles. Thanks
For client side code, you will want to use the HTTP Referer key restriction. You'll also want to set up request quotas to limit the number of calls that can be made if your key is compromised, and budget alerts so that you get notifications if there's an unexpected spike in usage. Not sure how this works with the CZcams API.
If you do not apply any restrictions, your API key can be used by anybody that finds your API key, so we strongly recommend that you apply API key restrictions. See this blog post for more guidance on which restrictions are right for you: goo.gle/2Zog0k5
@@GoogleMapsPlatform ... Why didn't you say that in the video? That and much more, instead of being so damn kind. Take out all the "please click here" bull and tell me "click here, dumb-ass!, so that you can do this, this, and this" -- make it clear! Damn, this is frustrating!
@@GoogleMapsPlatform ... Why "see this blog for more guidance"? Why do we have to turn the web upside-down, to look for tons of explanations and forum threads, and video tutorials, and... I'm here, aren't I? This is you covering the features of your product. Why didn't you just make it all clear and simple?...
@@GoogleMapsPlatform ... And I still don't understand. If I don't apply any API restrictions anyone can use my API? Then what's the Application Restriction good for??????? If I restrict it to MY domain, shouldn't it work only when accesed through my web address?
An API or SDK is only shown in the "API Restrictions" list (as shown in 3:51) if that API or SDK is enabled for the project you are managing. Be sure to follow the steps in "How to enable Google Maps Platform APIs and SDKs" czcams.com/video/n1UorU1PALk/video.html to enable the APIs you want to use with your project, then you can come back to this screen to apply API restrictions to your API key.
I followed the video precisely, activated the account with a credit card and generated an API key with no restrictions for testing. When I pasted the API key into to application, it returns a Javascript error #api--not-activated-map-error. How do I diagnose the problem?
It's best to use one API key for your Android app and a separate API key for your iOS app. developers.google.com/maps/api-security-best-practices#separate-apikey
We agree this would be a useful feature. Please add your request by clicking "Star" on this in our Public Issue Tracker, where you can also see current workarounds. issuetracker.google.com/issues/116590928
Can,anyone help me in Google maps API key, although I created the keys but I am unable to link the billing account, i guess because of Debit Card since I don't have credit card. Please,how can I fix my problem.
This is so ridiculous. One of my API keys was compromised. One month ago I deleted it. BUT requests from this KEY keep going and crashing my application. Why did you don't restrict deleted keys by default?
Keys that have been deleted from your Cloud Console shouldn't work for any app. Please open a support case to have us investigate. developers.google.com/maps/support#contact-maps-support
Nothing helpful in this video. You've stated the obvious UI in the cloud console and haven't said anything useful for how to decide your restriction values themselves.
Here's some more detailed guidance about key restrictions depending on which platform you're developing for and which API or SDK you're using: goo.gle/gmp-restrict-key
You would assign an 'Android apps' application restriction. Instructions for doing this are here: developers.google.com/maps/documentation/android-sdk/get-api-key#restrict_key
Subscribe to Google Maps Platform for tutorials, tips, user stories, announcements, and more! → goo.gle/GMapsPlatform
2:53 : Why do I have to add both http and https? Why not the domain without any prefix and allow both? Why not assume they're one and the same (applies to most), instead of assuming there's two different entities?, and let those who actually have two different entities specify.
2:40 : You replied to someone below that if he doesn't apply any API restrictions anyone can use his API. Then *WHAT* is the http application restriction good for?
... but you do say on page "if you want static map and street view restricted please disable these API's". So... how do I do that, if by clicking I'm enabling?, lol.
Literally i was flunking over the google console and couldn't found restrict key, it hepled me a lot. THANKS.....
3:46 : To add API restrictions, click "Restrict key". Then, from the "select API's" drop-down menu click all the API to which you want to enable acces to that key". This is disastruous!
:))
I would have assumed I'm selecting the ones I don't want access for, not the ones I'm giving access to. It'd make more sense, especially with previous similar settings options on all gadgets in the past. It's classical. First I'm selecting to restrict, you give me a list and I choose what to restrict. It's an "ok!, we got it that you want to restrict, not tell us what you want to restrict".
... whereas, you're here saying I'm selecting what to not restrict. And you don't even mention it on the page.
What about Browser and Server Keys? How can we create them?
im developing something with python, im trying to run a code and it seems like my key doesnt work beacuse the object giving me errors.... im using the api restriction... can u help ??
you should change the google marker to a pic of All Might's face
...also, thank you. Very helpful :)
Hi, which application restriction should I choose for use with a chrome extension please? Also, is there any guidance on how to hide api keys/prevent users from accessing my projects api key where it is visible in client side code? Also :) what safeguards are there for preventing malicious use of api keys as I'm not sure what precautions I may need to take? I'm using the youtube data api but I guess it's the same principles. Thanks
For client side code, you will want to use the HTTP Referer key restriction. You'll also want to set up request quotas to limit the number of calls that can be made if your key is compromised, and budget alerts so that you get notifications if there's an unexpected spike in usage.
Not sure how this works with the CZcams API.
Thanks so much for the video!
I have done each step as you describe but still i am getting error. Please guide me.
Thank you!
Did explain at all which restriction to chose. What happens if i do not select any restrictions.
If you do not apply any restrictions, your API key can be used by anybody that finds your API key, so we strongly recommend that you apply API key restrictions. See this blog post for more guidance on which restrictions are right for you: goo.gle/2Zog0k5
@@GoogleMapsPlatform ... Why didn't you say that in the video? That and much more, instead of being so damn kind. Take out all the "please click here" bull and tell me "click here, dumb-ass!, so that you can do this, this, and this" -- make it clear! Damn, this is frustrating!
@@GoogleMapsPlatform ... Why "see this blog for more guidance"? Why do we have to turn the web upside-down, to look for tons of explanations and forum threads, and video tutorials, and... I'm here, aren't I? This is you covering the features of your product. Why didn't you just make it all clear and simple?...
@@GoogleMapsPlatform ... And I still don't understand. If I don't apply any API restrictions anyone can use my API? Then what's the Application Restriction good for??????? If I restrict it to MY domain, shouldn't it work only when accesed through my web address?
Places API AND MAPS JS API NOT SHOWING ??????????????
An API or SDK is only shown in the "API Restrictions" list (as shown in 3:51) if that API or SDK is enabled for the project you are managing. Be sure to follow the steps in "How to enable Google Maps Platform APIs and SDKs" czcams.com/video/n1UorU1PALk/video.html to enable the APIs you want to use with your project, then you can come back to this screen to apply API restrictions to your API key.
I followed the video precisely, activated the account with a credit card and generated an API key with no restrictions for testing. When I pasted the API key into to application, it returns a Javascript error #api--not-activated-map-error. How do I diagnose the problem?
See goo.gle/30WczQu for how to enable the Maps JavaScript API and any other necessary APIs for your project.
Great video. Thank you
What if the api key is needed in Android and IOS both ?
It's best to use one API key for your Android app and a separate API key for your iOS app. developers.google.com/maps/api-security-best-practices#separate-apikey
Love you Google
I have created multiple API key and how do i track how much is charged for each key?
We agree this would be a useful feature. Please add your request by clicking "Star" on this in our Public Issue Tracker, where you can also see current workarounds. issuetracker.google.com/issues/116590928
Good job 👍
Can,anyone help me in Google maps API key, although I created the keys but I am unable to link the billing account, i guess because of Debit Card since I don't have credit card. Please,how can I fix my problem.
Please see this documentation for supported payment methods: goo.gle/3eM4qWA
thank youuu
This is so ridiculous.
One of my API keys was compromised.
One month ago I deleted it.
BUT requests from this KEY keep going and crashing my application.
Why did you don't restrict deleted keys by default?
Keys that have been deleted from your Cloud Console shouldn't work for any app. Please open a support case to have us investigate. developers.google.com/maps/support#contact-maps-support
Hi,
for Http, how i can make it accept from any wep applicatin?
Just don't restrict the API, that way anyone has your API key can use that on own sites and can steal your API hits :)
Good job
is that free ? like maps and login api key ???
Great..... 😊
Good video
Hapy maping to you too 😁
Thank you! very helpful.
is it free or paid?
Nothing helpful in this video. You've stated the obvious UI in the cloud console and haven't said anything useful for how to decide your restriction values themselves.
Here's some more detailed guidance about key restrictions depending on which platform you're developing for and which API or SDK you're using: goo.gle/gmp-restrict-key
how to prevent login use api key from computer ? i mean just allow Android apps to use my api key !
You would assign an 'Android apps' application restriction. Instructions for doing this are here:
developers.google.com/maps/documentation/android-sdk/get-api-key#restrict_key