A web-only app can't keep secrets
Quote
if you're a web only app, and you don't have a server back end, you you can't, you've really essentially can't have any secrets. No.
Episode 158: Thingamajigger (episode page, opens in a new tab) 01:43:09 (play audio from this timestamp, opens in a new tab)
Speaker-labeled
Summary
A PWA with no server back end can't hold keys or secrets, because everything ships to the browser and is visible. Plan a back end for anything that needs secrets (like wallet SDK keys).