view state scope is within a page.stored only serializable type data lifetime : untill page is active.not secure can easily find the data of viewstate in PAGE SOURCE

Because view state is stored in the page, it results in a larger total page size. ASP.NET uses view state only with page and control properties. View state isn't a good place to store sensitive information that the client shouldn't be allowed to see.