Supabase flashcards
A Postgres backend with an instant API, sign-in, row level security, storage, realtime and edge functions.
What is Supabase, in one plain sentence?
Supabase gives your app a ready-made backend built on the : a database, sign-in, file storage, live updates and server functions, all set up for you online.
Tap to turn over. Swipe right if you know it, left to see it again.
What you will learn
Start from zero
- What Supabase is and why5 cards
- First words and setup6 cards
Core basics
- Tables and queries from the app8 cards
- Row Level Security3 cards
- Sign-in3 cards
- Storage and Realtime3 cards
Next steps
- Migrations and local development3 cards
- Triggers and server functions5 cards
- Server rendering and querying4 cards
- Realtime and roles3 cards
- Testing and choosing2 cards
Go deeper
- Policy internals and security6 cards
- Scale and performance4 cards
- Reliability and data safety3 cards
- Workflow, checks and portability4 cards
Final test and certificate
10 questions drawn fresh from the whole topic, about 15 minutes. Sign in, score 80% or more and get a free certificate with your name and a public check link anyone can open, such as an employer or a teacher. Not signed in? Try a practice test from the cards.
Take the final testAbout these cards
- Reviewed 26 October 2026
- Coverssupabase-js 2Supabase CLI 2PostgreSQL 17Publishable and secret API keys
Checked against
Supabase at a glance
Supabase gives your app a ready backend built on a real PostgreSQL database, with sign-in, storage, live updates and functions.
Supabase is a fully fitted office around a sturdy safe: the safe is Postgres, and Supabase adds the front desk, mail room and guards.
Words you will meet
- Database
- An organised store of information many apps can use at once
- Table
- Rows and columns of data, like a spreadsheet
- PostgreSQL
- The free, popular database inside every Supabase project
- SQL
- The language for asking a database questions
- Authentication
- Checking who someone is when they sign in
- Row Level Security
- Rules in the database that decide which rows each user may see
- API
- A way for apps to ask a server for data over the internet
The steps
- 1. Start from zero (11 cards): What Supabase is, how tables and SQL work, and the words you need before building your first backend.
- 2. Core basics (17 cards): Connecting, tables, select, insert, update, joins, RLS policies, magic links, Google sign-in, Storage, Realtime and types.
- 3. Next steps (17 cards): Migrations, signup triggers, Edge Functions, SSR auth, paging, search, broadcast, team policies, cron and tests.
- 4. Go deeper (17 cards): Fast and safe policies, security definer, views, PostgREST, pooling, pgvector, realtime scale, backups and portability.
All 11 cards in Start from zero
- What is Supabase, in one plain sentence?
- Supabase gives your app a ready-made backend built on the PostgreSQL database: a database, sign-in, file storage, live updates and server functions, all set up for you online.
- What is a database, in everyday words?
- A database is an organised store of information that many people and apps can read and change at once, like a shop's stock book that never gets lost and can answer questions quickly.
- Give an everyday picture of a table.
- A table is like a spreadsheet: each row is one thing, such as one order, and each column is one fact about it, such as total or status.
- Where do you meet Supabase-style backends in daily life?
- Startup apps, booking and membership sites, internal company tools and AI apps that search documents often run on Supabase or a similar Postgres backend.
- Key word: what is PostgreSQL (Postgres)?
- PostgreSQL is a free, very popular database that stores data in tables and is queried with the SQL language. Every Supabase project is a full Postgres database.
- Key word: what is SQL?
- SQL is the language for asking a database questions and changing data, like "show all paid orders". It reads almost like English.
- Key word: what is authentication?
- Authentication checks who someone is, through a password, a magic link sent by email, or Google sign-in. Supabase Auth does it and gives each user an ID.
- Key word: what is Row Level Security (RLS)?
- RLS is a set of rules inside the database that decide which rows each user may see or change, like "you can only see your own orders".
- Key word: what is an API, and how does Supabase give you one?
- An API is a way for apps to ask a server for data over the internet. Supabase creates one automatically from your tables, so your app can read and write data without you writing server code.
- What do you need before starting?
- A free Supabase account, basic JavaScript, and ideally some SQL. For local work you also need Docker and the Supabase command line tool.
- What will you be able to do after this topic?
- Design tables, read and write data from your app, add sign-in, protect every row with policies, store files, push live updates, write server functions and run migrations safely.
Supabase cheatsheet
supabase-js
createClient(url, publishableKey)Connect.from('t').select('a, b')Read columns.eq('col', v) / .in('col', [...])Filter.order('c', { ascending: false })Sort.range(0, 19)Page.insert(row).select().single()Insert and return.rpc('fn', args)Call a SQL function
Auth
auth.signInWithOtp({ email })Magic linkauth.signInWithOAuth({ provider })Google and othersauth.getClaims()Verify user on serverauth.onAuthStateChange(cb)Watch sign-inauth.signOut()Sign out
RLS
alter table t enable row level security;Turn on RLScreate policy ... for select using (...)Read rulefor insert with check (...)Write rule(select auth.uid())Current user, fastto authenticatedSigned-in users onlywith (security_invoker = true)Safe views
CLI
supabase startLocal stacksupabase migration new nameNew migrationsupabase db resetRebuild local DBsupabase db pushApply to linked projectsupabase gen types typescriptTypes from schemasupabase functions deploy nameDeploy Edge Function