Logout and data-residue guides

Practical guides on clearing tokens and personal data on logout, for iOS, React Native, Flutter and Android.

2026-10-15 · 7 min

MASWE-0024: the OWASP weakness with no test, and how to test it

OWASP lists “sensitive data accessible after session termination” as MASWE-0024, but no MASTG test is mapped to it. Here is a repeatable logout residue test for iOS, React Native, Flutter and Android.

MASWE-0024logout security testtoken still there after logoutclear data on logout

Read article

2026-04-30 · 6 min

Sensitive data in iOS app memory: what to check after logout (2026)

What memory residue is, why OWASP dropped its memory test, and why storage and caches matter more after logout. A practical before/after check for the iOS Simulator.

sensitive data in iOS memorytoken after logout iOSclear data on logoutMASWE-0024

Read article

2026-04-30 · 4 min

Xcode Instruments, Memory Graph and residue testing: which answers what

Instruments and the Memory Graph find leaked objects and measure memory. They don't search for secret values. When to use each, and how they fit together after logout.

Xcode Instruments securityMemory Graph logoutiOS residue testingsensitive data detection iOS

Read article

WatchMemory's Mac app is local-first: scans stay on your machine. Web analytics are privacy-friendly and used only to improve the website.