All 6 Security & Authentication questions
More in Security & Authentication
How do you implement OAuth/OpenID Connect login in MAUI? How do you add biometric authentication (fingerprint/Face ID)? How do you enforce SSL/certificate pinning in MAUI? What are key security best practices for a production MAUI app? How do you protect API keys and secrets that the app needs?
Advertisement
Back to results for “Security”
.NET MAUI › Security & Authentication

How do you store authentication tokens securely in MAUI?

Beginner

Answer

Use SecureStorage, which encrypts values with the platform keystore/keychain, for tokens and secrets. Never keep them in Preferences (plain) or in source. Clear tokens on logout with SecureStorage.Default.Remove or RemoveAll.
await SecureStorage.Default.SetAsync("refresh_token", token);
SecureStorage.Default.Remove("refresh_token");   // on logout
Real-world example After sign-in the refresh token lives in the OS keychain and is wiped on logout.

Common follow-ups: Why not Preferences for tokens? | How do you clear on logout?

SecureStorage Authentication Security & Authentication
All 6 Security & Authentication questions