title: What steps should I take to protect my Google Maps API Key?
body: <p>I have obtained a Google Maps API key for my domain.</p>
  
  <p>The examples provided when I obtained my key show the key embedded in request parameters, for example:</p>
  
  <pre><code>&lt;script src="http://maps.google.com/maps?file=api&amp;amp;v=2&amp;amp;sensor=true_or_false&amp;amp;key=my-key" type="text/javascript"&gt;&lt;/script&gt;
  </code></pre>
  
  <p>I appreciate that the referrer field in requests must match my domain, is it safe to make my key visible in script tags and the like? Or are there any other steps I should take?</p>