SecureStorage equivalent for the JavaScript port?

[jsfan3]

Hi Shai, SecureStorage provides protected storage on iOS and Android, right? Is there an equivalent for the JavaScript port?

I need to synchronize password-encrypted data between Android and the web app. Where should I store the user's password, or preferably the derived encryption key, in the browser so it can be reused securely? Keeping it only in memory would mean asking for the password again on every page reload, which isn't practical.

[shai-almog]

We don't have something decent there yet. I had claude writeup an issue for that: #5770 we'll try to add it. This would require some API changes due to the nature of JS where a malicious same origin script could game the current API to expose a secret.