to send a GCM, we have a SENDER ID from Google API console, is that important to keep that SENDER ID protected? I mean, would someone be able to do bad things if they know that ID? I did a mistake and I think that ID was in one of my projects... am I able to somehow change it? I couldn't find anyway to change it by looking at the Google API console!. should I be worried about that? or is it ok?
the server and browser API keys can be changed but not the SENDER ID, PROJECT NUMBER...
Yes you should keep the project number
(which is the Sender Id
as well for GCM) protected; otherwise anyone can use it and it will count toward your usage of the API. It is similar to the API key for any other service e.g. Google Maps.
I am not aware of any method to change it other than create a new Google account, but in the Dashboard of Google API console there is an option to register/generate a Project ID
but I am not sure if GCM will accept this as Sender Id
. You can give it a try.
Edit:
It might not be that dangerous if your project number
is exposed (in the old APIs the sender id was your e-mail) , because still you will need API key
to be able to send notification via GCM