# 9 Ways To Secure your GraphQL API -- GraphQL Security Checklist

DevFeed: [9 Ways To Secure your GraphQL API -- GraphQL Security Checklist](<https://devfeed.tech/articles/9-ways-to-secure-your-graphql-api-graphql-security-checklist-23117.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/9-ways-to-secure-your-graphql-api-security-checklist>)

Author: Khalil Stemmler

Published: 2021-05-26T11:03:58Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>)

Tags: [auth](<https://devfeed.tech/tags/auth.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [security](<https://devfeed.tech/tags/security.md>), [token](<https://devfeed.tech/tags/token.md>)

## AI overview

This tutorial presents a security checklist for GraphQL APIs, covering authentication, authorization, JWT-based user authentication, limiting query depth and malicious queries, and using Apollo Studio for performance monitoring and more secure internal access to production data.

## Source excerpt

So you've built out your GraphQL API, and you're nearly ready to deploy it to production. Fantastic. Let's talk security: a significant part of every stable application on the internet. It's worth taking some time to mitigate the most common issues. In this article, we will explore three main areas for how to secure your GraphQL API. We'll learn how to set up a reasonable auth strategy and limit the GraphQL attack surface area.