# Supabase Security Retro: 2025

DevFeed: [Supabase Security Retro: 2025](<https://devfeed.tech/articles/supabase-security-retro-2025-665.md>)

Original publisher: [Read original article](<https://supabase.com/blog/supabase-security-2025-retro>)

Author: Bil Harmer; Paul Copplestone

Published: 2026-01-07T07:00:00Z

Content type: article

Language: en

Sources: [Supabase Blog](<https://devfeed.tech/sources/supabase-blog.md>)

Topics: [Supabase](<https://devfeed.tech/topics/supabase.md>), [Security](<https://devfeed.tech/topics/security.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [API](<https://devfeed.tech/topics/api.md>), [Database](<https://devfeed.tech/topics/database.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [database](<https://devfeed.tech/tags/database.md>), [github](<https://devfeed.tech/tags/github.md>), [migration](<https://devfeed.tech/tags/migration.md>), [platform](<https://devfeed.tech/tags/platform.md>), [post](<https://devfeed.tech/tags/post.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [tooling](<https://devfeed.tech/tags/tooling.md>)

## AI overview

Supabase's 2025 security work focused on safer defaults, improved tooling, stronger API key management, and broader protection for database tables. The article also outlines planned security improvements for 2026, including migration away from legacy keys.

## Source excerpt

A summary of Supabase platform security changes made in 2025 and the security defaults planned for 2026.