Android private access tokens

1. What are private access tokens?
2. What replaced Apple CAPTCHA?
3. How do I manage my personal access tokens?
4. How do I store my access token securely?

What are private access tokens?

iOS 16 and macOS Ventura users can opt in to a new Apple feature called Private Access Tokens (PATs). PATs are intended to help verify human users without displaying a CAPTCHA. Using a combination of device details with the user's Apple ID, PATs tell websites whether or not a user is legitimate.

What replaced Apple CAPTCHA?

A new feature called Private Access Tokens will use a combination of details about your device and your Apple ID to inform a website that you are a legitimate user rather than a robot. In turn, this allows you to completely bypass the CAPTCHA step.

How do I manage my personal access tokens?

From your home page, open your user settings, and then select Profile. Under Security, select Personal access tokens. Select the token you want to modify, and then Edit. Edit the token name, organization it applies to, token expiration, or the scope of access that's associated with the token, and then select Save.

How do I store my access token securely?

Browser in-memory scenarios

Auth0 recommends storing tokens in browser memory as the most secure option. Using Web Workers to handle the transmission and storage of tokens is the best way to protect the tokens, as Web Workers run in a separate global scope than the rest of the application.