Securing Google Maps API key

A number of restrictions can be assigned to an API key to limit how it can be used. Restricting API keys is optional but highly recommended since they help keep your account secure and prevent unintended or malicious usage of your project.

Follow the steps below to limit which websites are allowed to use your Google Maps API key.

Step 1: Open Google Credentials

Open the Google Cloud Console → APIs & Services → Credentials
Make sure you’re signed in to the same Google account used to create your API key
Check the project selector at the top of the page and confirm it shows the project you created for Store Locator

In most cases, there will only be one project listed.

Step 2: Select the Correct API Key

In the list of API keys, click the name of the key you’re using with Store Locator
On the key details page, confirm this is the same key added in Store Locator app settings

If you edit a different key, the changes will not affect your Store Locator.

Step 3: Set Website Restrictions

Under Application restrictions, select Websites
Under Website restrictions, add your website’s domain(s)

For a site hosted at example.com , add both of the following: example.com/*, *.example.com/*

Replace example.com with your actual domain.

⚠️ If your site uses www.example.com , do not include www — the entries above already cover it.

The placement of dots (. ), slashes (/ ), and asterisks (* ) is important.

Only replace example.com and leave the rest exactly as shown.

⚠️ As your site is on Shopify, also add the following domains: example.myshopify.com/*, .shopifypreview.com/

Step 4: API Restrictions

Scroll down to API restrictions and leave this option set to:

Don’t restrict key

Step 5: Save Your Changes

Click Save at the bottom of the page
Wait a few minutes for the changes to take effect

(It can take up to 5 minutes for Google to apply updates.)

After that, refresh your website and confirm the map loads correctly.

Do you need help?

If you have any questions or run into issues, please contact us — we’re happy to help. Contact support.