After reading some articles, I realize that using localStorage and sessionStorage is a bad idea for storing JWT tokens, and cookies with httpOnly should be used instead. As I read more and learn some about indexedDB today, I wonder if indexedDB is a secure option for storing JWT tokens as well? Re…

Should I store JWT tokens in IndexedDB?

dan.woda May 24, 2021, 8:18pm 3

Welcome to the Community!

It looks like indexedDB is subject to the same risks as localstorage and won’t solve for this.

1 Like

Topic		Replies	Views
Where to store refresh token on WEB? JWT.io jwt , login	2	4865	July 8, 2019
Where to store JWT? JWT.io	2	4277	July 26, 2019
Isn't storing a JWT in a non-httponly cookie just as insecure as local storage? JWT.io cookie , localstorage	4	9508	August 21, 2020
We have to not use refresh token, and we have to not store tokens at browser side. isn't it? JWT.io	1	5569	July 4, 2019
Which is the best way to store the auth0 token for a web app JWT.io auth0 , localstorage	7	13716	September 2, 2019