Trufflesecurity Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co. Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.