Remember: if a random stranger asks for your .bubble file; don't

I just got an email that is likely a phishing scam. The person claims to be able to transition your Bubble app to code. If you just give them your .bubble export file…

Remember, that file contains all the secrets and API keys your app uses. So, if you’re gonna do that, please at least delete the settings.secure key.

15 Likes

FYI for anyone using Buildprint, Buildprint removes your API keys from settings.secure (where Bubble stores private API connector / plugin parameters and admin API tokens) client side before it ever touches the server :slight_smile:

4 Likes

Thanks for the warning :grinning_face: