DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
Why is embedding a client_secret in a mobile app's binary or in browser-shipped JavaScript considered unsafe?
A
It's actually perfectly safe in both cases
B
Any secret embedded in code that reaches the client — a distributable binary or delivered JS — can be extracted by anyone with access to that code, making it not truly secret
C
Mobile apps cannot store any data at all
D
This only matters for Android, not iOS
Check Answer