title: Storing password in the client side using Appcelerator - Design Approach
body: <p>I am creating an application using Appcelerator wherein the user needs to enter the username and password to login. Once logged in, the user can enable TouchID for authentication. After logging out, the user can use the TouchID for authentication and use the application.</p>
  
  <p>My flow is that once the username and password is provided, I store those two information in Keychain using the following module <a href="https://github.com/pegli/ti_keychain" rel="nofollow noreferrer">iOS Keychain Module</a>. Then I use ti.touchid to authenticate the fingerprint, if success, then I retrieve the username and password from keychain and then send it over HTTPS web service call and login the user to the application.</p>
  
  <p>My query is that, whether this is an acceptable approach.</p>