Securely store token/password in Chrome extension

Question

I'm implementing a Chrome extension, which needs to access a 3rd party API endpoint using a token.

How do I store a token securely in the Chrome extension, assuming other Chrome extension scripts can access the page's localStorage & cookie?

Answer 1

Other scripts cannot access your storage. But a user can always debug your script and see it. You wont be able to encrypt it. At most you can obfuscate it.