How to protect the free tier of your Lovable app

Why Lovable apps are targets

Lovable makes it fast to ship an AI app with sign-up and free credits. That also makes it fast for someone to find your free tier and script account creation against it.

Every farmed account calls your AI model, so abuse shows up directly in your usage bill.

Step 1: Add the Unfarm browser script

Add the Unfarm script to your sign-up page with your public key. It collects device and browser signals and returns a request ID when the user signs up.

Step 2: Check the verdict on the server

Before granting free credits, ask Unfarm for the verdict using your secret key in a server function. Never trust a verdict that comes from the browser.

Allow: give credits. Review: give a smaller amount or hold credits until a person checks. Block: create the account without free credits.

Step 3: Audit past signups

Export your existing user emails and upload them to Unfarm Batch audit. You will see which accounts are likely the same person and an estimate of what they cost you.

Tip: ask Lovable to do it

You can paste a prompt like: "Add Unfarm to my sign-up. Send the request ID to a server function, check the verdict with my secret key, and only give free credits when the verdict is allow." Store the secret key as a secret, not in code.