Secure Storage

Security: Storage, Keychain and Keystore

A shop app keeps secrets: a session token, a refresh token, perhaps a customer's saved notes. The WebView's storage and Capacitor 243,123 's Preferences plugin write them as plain text inside the app sandbox, which is fine for a cart and wrong for a token. This section shows the difference on the emulator, then stores the same token with the Android Keystore and a note in an encrypted database.

Subsections