For developers · Checked 1 October 2026

Firebase AI Logic: the App Check deadline and Gemini 2.5 shutdowns

Short answer: starting November 2, 2026, Firebase will automatically enforce App Check for Firebase AI Logic in every project, enforcement can’t be turned off, and any request without a valid App Check token will be blocked, including requests from released app versions that don’t implement a production attestation provider. Separately, Gemini 2.5 models are being retired: on the Agent Platform Gemini API (formerly Vertex AI) they shut down on October 20, 2026, and gemini-2.5-flash-image shuts down on October 2, 2026 for both providers.

Dates to plan around

From Firebase AI Logic documentation and FAQ, read 1 October 2026.

DateWhat happens
Early July 2026New Firebase AI Logic setups in the console enforce App Check automatically
October 2, 2026gemini-2.5-flash-image («Nano Banana») shuts down, both API providers
October 20, 2026Gemini 2.5 Pro, Flash and Flash-Lite shut down on the Agent Platform Gemini API
No date yetGemini 2.5 on the Gemini Developer API: deprecated, only previously active projects can use it
November 2, 2026App Check enforced for Firebase AI Logic in all projects; unverified requests blocked

Check whether you are enforcing App Check

In the Firebase console, open Security → App Check → APIs and find the Firebase AI Logic row. If it says Unenforced, click it, then Set up, choose Enforced for baseline protection, and review the considerations before continuing. Projects that set up AI Logic before early July 2026 are the ones most likely to still be unenforced. Replay protection, which makes each token single-use, needs limited-use tokens in your app and can be turned on later.

Already-released apps are the risk

Every app version that calls Firebase AI Logic needs App Check. Versions already in users’ hands without it will fail once enforcement starts, so Firebase’s migration path is: implement a production attestation provider now, ship it, monitor the share of verified requests, and enforce once almost all recent requests are verified. Providers by platform: Apple DeviceCheck, App Attest or reCAPTCHA Enterprise; Android Play Integrity or reCAPTCHA Enterprise; web reCAPTCHA Enterprise; Flutter and Unity support the same providers, with reCAPTCHA Enterprise for Unity listed as coming soon. For local development, keep enforcement on and use the debug provider, and never commit or ship the debug token. On Android, see our guide to the Play Integrity API.

Moving off Gemini 2.5

Firebase names gemini-3.8-flash and gemini-3.1-flash-image as replacements. Several weeks before a shutdown date, projects that haven’t used a model are blocked from starting to use it. Stable Gemini Live API 2.5 models and other «Nano Banana» models aren’t affected. Because Firebase AI Logic works with Remote Config and server prompt templates, you can change the model name without shipping a new app version if you set that up in advance.

Other changes in 2026

From mid-2026, Firebase AI Logic authorizes requests with a Google-managed service account, the Firebase AI Logic Service Agent, instead of a standard Gemini API key. Firebase AI Logic itself is free; costs come from Gemini API usage and other Firebase services, and Firebase recommends budget alerts and spend caps. For on-device alternatives, see Gemini Nano on Android and Apple Foundation Models.

Where Censuus fits

Keeping your AI feature working keeps users; being found brings them in. Censuus ranks apps by the visits they draw, and adding your app is free on the List my app form. Placement comes from traffic and sponsorship: apps climb on the visits they draw, and a sponsor can pay to rise higher.

Frequently asked questions

Is App Check required for Firebase AI Logic?

Yes, from November 2, 2026. Firebase will enforce it automatically, it can’t be turned off, and requests without a valid App Check token will be blocked.

What happens to old app versions without App Check?

Their requests to Firebase AI Logic will be blocked once App Check is enforced. Firebase recommends shipping a version with a production attestation provider and moving users to it before November 2, 2026.

When does Gemini 2.5 Flash shut down?

On the Agent Platform Gemini API (formerly Vertex AI), October 20, 2026. On the Gemini Developer API it is deprecated with no shutdown date announced, and only previously active projects can keep using it.

When does gemini-2.5-flash-image shut down?

October 2, 2026, for both Gemini API providers. Firebase suggests gemini-3.1-flash-image as a replacement.

Which App Check provider should I use on Android?

Play Integrity or reCAPTCHA Enterprise. On Apple platforms, DeviceCheck, App Attest or reCAPTCHA Enterprise.

Guides for app developers

Put your app in the ranking

Censuus ranks apps by the visits they draw and by sponsorship, no bots. Listing is free; sponsorship raises placement.