Hi all Complete newbie homey app and Java script developer here, building my first app and I’m looking for advice on how to securely store a user’s username and password entered into app settings for my app. The app accesses an API that uses JWT for authentication. Each issued JWT expires after 7 …

Okay @Jonathan_Draper , i just checked: I cannot seem to find a way to read the Store Values from devices from another App. Meaning, you could just store the Username and Password, or a Random Generated Encryption Key, in A device’s Store . Afaik, This can only be read by the App itself. Even the …

@Jonathan_Draper in that kind of cases i have a env.json with a secret key. And then I encrypt the password with that key. encrypt function Example here: com.synology/helpers.js at main · martijnpoppen/com.synology · GitHub

It’s been suggested by Athom that with the new Homey Pro all files belonging to an app will be readable by adventurous users.

As far as i know the env.json is not accessible :confused:

Yes, for now. But on the new Homey Pro 2023 it will be different, as written in the developer update. The new Homey Pro can be fully backed up to a Mac or PC using USB. This means the entire operating system & userdata is saved .Because of this new feature, it’s considerably easier for users to ac…

Ah yes… I sent athom a message, lets hope they’ll explain that part

I hope they will answer you :wink:

This is what they wrote in the developer newsletter from October 12th: The new Homey Pro can be fully backed up to a Mac or PC using USB. This means the entire operating system & userdata is saved. Because of this new feature, it’s considerably easier for users to access and/or change Homey Pro’s…

Yes but you might expect they’ll provide a alternative for env vars right :slight_smile:

Well… [Screenshot 2022-10-14 at 13.03.44]

How to securely store username and password for an API within my app

Developers

DaneedeKruyff November 19, 2022, 6:29pm 12

I hope they will answer you

UK smart meter integration

Topic		Replies	Views
How to store login settings when creating a new app (that integrates with an api) Developers	5	803	February 28, 2022
Ways to store external API keys? Developers	2	877	July 17, 2019
Getting to environment variables from my api.js code Developers	4	579	November 7, 2022
Feature request: expose per-app storage usage to OAuth2 Web API Clients Ideas & Suggestions featurerequest	2	73	July 30, 2026
[FeatureRequest] Native Secret Manager / Secure Variables for HomeyScript and Advanced Flows Ideas & Suggestions featurerequest , advancedflow	0	70	October 11, 2026

How to securely store username and password for an API within my app

Related topics