Dataford
Interview QuestionsInterview GuidesExperiencesMock InterviewsPricing
Get started

Design Mobile User Authentication

MediumCoding00:00
Practice interviewer
In session
5 left
00:00

Your question is Design Mobile User Authentication. Take a moment with it on the right.

Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).

You need to log in / sign up to chat or submit.

Problem

Design the authentication flow for a mobile app. Your answer should cover how a user signs in, how credentials are exchanged for a session token, how the app stores and refreshes that token securely, and how logout invalidates the session.

Scope

  • Support sign-in with username/password.
  • Persist the session across app restarts.
  • Refresh expired sessions without forcing frequent re-login.
  • Handle logout and token revocation.
  • Avoid storing secrets in plain text.

Constraints

  • Assume the app communicates over HTTPS.
  • Assume the backend issues short-lived access tokens and longer-lived refresh tokens.
  • The solution should work on iOS and Android.
  • Do not rely on insecure local storage for secrets.