Security impact of using Row ID in app

[Jonas_Boury]

Hi,
I am working on a project where users can send credits to other users in the app.
I am currently using the Glide Row ID of the user’s table to identify the counterparty of these transactions. So the Row ID of a user is visible in the app for others users. I assume that the user row ID is probably also used internally by glide as a user identifier.
I was wondering if showing the row ID number in the app would compromise the security of my application. So does it become easier for a hacker to impersonate another user if he has public access to all user row ids?

[Darren_Murphy]

If you’re concerned about User Security, then you really should be using Row Owners, in which case the RowID’s in your Users table wouldn’t even be accessible to other users.

I’d suggest taking a look at the below tutorial:

Secure Your Data with Row Owners and Public Profiles

Hey fellow Gliders! Are you using Row Owners and Public Profiles to secure your user data? If not, you might accidentally expose private info. Let’s fix that. In this important tutorial, I demonstrate how and why to enable Row Owners, create a Public Profiles table, and onboard new users in order to safely create a community app that doesn’t reference the User Profile table. [Glide: Secure Your Data with Row Owners and Public Profiles] You can also reference this article in…

[david]

We do not use Row ID to identify users internally.

[Jonas_Boury]

Thanks, very helpfull