Is it safe to store token as password with blank username.

In the begining I stored my token by AsyncStorage, but as I found in https://github.com/facebook/react-native/issues/1032, keychain could be much safer to do it.

So I’m wondering if it’s safe to store my token like this:

var server = 'http://facebook.com';
Keychain
  .setInternetCredentials(server, '', token)
  .then(function() {
    console.log('Credentials saved successfully!');
  });

Since the API will only return a token, there’s no username here.

[sauhardar]

Agreed here! Any updates on this?

[Parrryy]

Hey, ideally we don’t want to store the username and password combo on the device, but an encrypted token. From what I’ve seen this library is referenced as the secure solution to store the token but I can’t see anywhere on the library of an example of how to do this.

Currently, I’m toying with the idea of using the setGenericPassword with the username and token combination and explaining this in the code comments however it doesn’t seem like the best solution. Any thoughts on this? I feel a setAuthToken or something similar may be beneficial with a good example? Has anyone stored an auth token using this library.