Back to Blog
Proton mail security6/10/2023 ![]() ![]() ![]() The refresh token is used to generate new access tokens and is stored securely in the operating system’s keychain (Windows Credentials Manager, macOS Keychain, or pass/gnome-keyring on Linux). The access token is relatively short-lived and is used to authenticate any subsequent API requests it is stored in the device’s memory. This authentication process ensures a user’s password never leaves their machine, and it generates an access token and a refresh token. Your passwords never leave your machine Users log in to Bridge, which in turn authenticates with the Proton Mail API using the Secure Remote Password protocol (new window). We explain how Bridge secures this sensitive data in greater detail below.
0 Comments
Read More
Leave a Reply. |