diff --git a/frontend/src/App.js b/frontend/src/App.js
index a6bdb57..ed0092a 100644
--- a/frontend/src/App.js
+++ b/frontend/src/App.js
@@ -112,7 +112,7 @@ function MainApp() {
 
   const loadKnownSessions = React.useCallback(() => {
     try {
-      const raw = localStorage.getItem(SESSION_STORAGE_KEY);
+      const raw = sessionStorage.getItem(SESSION_STORAGE_KEY);
       if (!raw) return [];
       const parsed = decodePayload(raw);
       if (!Array.isArray(parsed)) return [];
@@ -150,11 +150,11 @@ function MainApp() {
         ...existing.filter((s) => s.session_id !== normalizedSessionId),
       ];
       try {
-        localStorage.setItem(SESSION_STORAGE_KEY, encodePayload(next.slice(0, 50)));
+        sessionStorage.setItem(SESSION_STORAGE_KEY, encodePayload(next.slice(0, 50)));
       } catch (_) {
         // sessionStorage quota exceeded — prune to 10 most recent and retry once.
         try {
-          localStorage.setItem(SESSION_STORAGE_KEY, encodePayload(next.slice(0, 10)));
+          sessionStorage.setItem(SESSION_STORAGE_KEY, encodePayload(next.slice(0, 10)));
         } catch (_) {}
       }
     },
diff --git a/frontend/src/App.test.js b/frontend/src/App.test.js
index c8ffc12..4c7ddf1 100644
--- a/frontend/src/App.test.js
+++ b/frontend/src/App.test.js
@@ -56,13 +56,14 @@ function loadKnownSessions() {
         (s) =>
           s &&
           typeof s.session_id === "string" &&
-          s.session_id.trim() !== "" &&
-          typeof s.session_secret === "string" &&
-          s.session_secret.trim() !== "",
+          s.session_id.trim() !== "",
       )
       .map((s) => ({
         session_id: s.session_id.trim(),
-        session_secret: s.session_secret.trim(),
+        session_secret:
+          typeof s.session_secret === "string" && s.session_secret.trim() !== ""
+            ? s.session_secret.trim()
+            : null,
       }));
   } catch (_) {
     return [];