# JavaScript + Security + Firebug

**URL:** <https://forum.kirupa.com/t/javascript-security-firebug/252443>\
**Category:** random\
**Created:** [February 20, 2008, 7:22am UTC](https://forum.kirupa.com/t/javascript-security-firebug/252443 "2008-02-20T07:22:56Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kdd](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kdd](https://forum.kirupa.com/u/kdd)\
**Post date:** [February 20, 2008, 7:22am UTC](https://forum.kirupa.com/t/javascript-security-firebug/252443/1 "2008-02-20T07:22:56Z")

</div>

So, in firebug you can see all your javascript variables and whatnot. From DOM tab, I can even change the javascript variable value. But does the change really take the effect?

Is there any other way to change javascript variables? Is it a good idea to have javascript variables that might store (sort of) secure data?

Thanks! 🙂

Edit: Yup, changing value from within firebug does have an effect on how your page will behave.

So, what’s a good practice to store secure variables in javascript? By secure, I don’t mean credit card #, just some id or something.