title: How to keep client JSON web token secure in a React Native app?
body: <p>We are building a React Native app for iOS and we are using an internal API built on node + express + jsonwebtoken.</p>
  
  <p>When the user logs in with username/password, the server validates those credentials and sends the client back a JSON web token that they must then send along with every API request. So the React native app must store this token.</p>
  
  <p>How do I securely store this client token in the React native app? Is it necessary to take any additional steps besides just storing the token in a variable?</p>