How do extension wallets save sensitive user information?

Question

Is there any standard practice about how all extension wallets (Phantom, Glow, Backpack, etc) store sensitive information like seed phrase or master private key? As an extension dev, were should I save such information and how should I ensure the safety of the information?

Answer 1

Best to store this information only locally, encrypted by the password used to unlock the wallet. On Chrome, extensions store data in C:\Users\[login_name]\AppData\Local\Google\Chrome\User Data\Default\Extensions on Windows, or /home/USER_NAME/.config/[chrome, chromium, brave, vivaldi, etc]/Default/Extensions on Linux

Answer 2

Not sure, but two places to look might be:

• Backpack GH Repo
• Sollet Wallet GH Repo