The internet is a delightful and dangerous place. Browser-based apps need strong security fundamentals to protect their users; crypto apps often even more so. Here are threats present in a browser environment, and here are a few architecture and policy guidelines for securing secrets online.