Apple’s iCloud Keychain Password Management Is All Many People Need

ByEmily Dolloff

Apple’s iCloud Keychain Password Management Is All Many People Need

We constantly recommend using a password manager like 1Password, BitWarden, or Dashlane. But many people resist committing to yet another app or paying for yet another service. Isn’t Apple’s built-in iCloud Keychain password management good enough?

The answer now is yes, thanks to two recent changes:

  • In iOS 17.3, Apple added Stolen Device Protection, which leverages biometric authentication—Face ID or Touch ID—to protect users against thieves who would surreptitiously learn someone’s passcode, steal their iPhone, and then take over their digital lives. One of the worst aspects of that attack was that the iPhone passcode was sufficient to access the user’s stored passwords, so the thief could get into everything.
  • Until mid-2023, Apple’s built-in password management worked only in Safari, which was problematic for users who rely on other browsers. Then Apple updated its iCloud Passwords extension for Google Chrome to work not just in Windows, but also in Mac browsers based on Google Chrome running in macOS 14 Sonoma. There’s also now an iCloud Passwords add-on for Firefox.

If you aren’t yet using a password manager, try iCloud Keychain.

Passwords Basics

Apple integrated iCloud Keychain into macOS, iOS, and iPadOS at a low level, so you mostly interact with your passwords in Safari. But first, make sure to enable iCloud Keychain so your passwords sync between your devices. On the Mac, you do that in System Settings > Your Name > iCloud > Passwords & Keychain. On an iPhone or iPad, it’s in Settings > Your Name > iCloud > Passwords and Keychain.

If you’re using a browser other than Safari, install the iCloud Passwords extension or add-on and activate it by clicking it in the toolbar and entering the verification code when prompted.

When it comes to website accounts, there are two main actions: creating a login and logging in to a site:

  • Create a new login: When you need to create an account on a new website, after you enter whatever it wants for email or username, Safari creates a strong password for you. Unfortunately, the iCloud Passwords extension or add-on on the Mac can’t generate passwords—you can either create a strong password manually or switch to Safari temporarily to let it create one. When you submit your credentials, you’ll be prompted to save them.
  • Autofill an existing login: The next time you want to log in to a site for which you’ve saved credentials, Safari or your other browser on the Mac displays a pop-up with logins matching the domain of the site you’re on. On the iPhone or iPad, you might get an alert at the bottom of the screen or have to pick a choice in the QuickType bar above the keyboard.

For basic usage, that’s it! However, iCloud Keychain can make mistakes. The site shown above asks for both an email address and a username and wants the email address for logging in, but iCloud Keychain remembered the username instead. Happily, Apple makes it easy to fix such unusual missteps. On the Mac, open System Settings > Passwords, or on the iPhone or iPad, open Settings > Passwords. Here’s where you find and edit your saved logins.

Open the desired login by double-clicking it on the Mac or tapping it on the iPhone or iPad, then click or tap Edit and make any desired changes.

iCloud Keychain provides additional features and options:

  • A search field at the top of the Passwords window or screen helps you find logins if scanning the full list is frustrating.
  • You can use commands in the + menu to create new passwords and shared groups. On the Mac, commands in the ••• menu let you import and export passwords; the iPhone and iPad use that menu to bulk-select passwords for deletion and show generated passwords.
  • Shared groups let you share a subset of passwords with family or colleagues. Choosing New Shared Group triggers an assistant that walks you through naming the group, adding people from Contacts, and choosing which passwords to share. You can move passwords between groups at any time.
  • The Security Recommendations screen displays logins exposed in known breaches and points out logins with weak passwords. Check those and update them as necessary.
  • In Password Options, you can turn off autofill, but why would you? Another option automatically deletes verification codes you receive in Messages after it inserts them with autofill.
  • On websites that support two-factor authentication, you can set up a login to autofill the verification code. During setup on the site, you’ll get a QR code you can scan with an iPhone or iPad if you’re using a Mac; if you’re using an iPhone or iPad, touch and hold the QR code and choose Add Verification Code in Passwords. Once you finish configuring the login, you’ll have to enter the six-digit verification code on the site to link it with the login.

Overall, iCloud Keychain provides the password management features that most people need, and it’s a massive security improvement over keeping a document of your passwords on your desktop.

(Featured image by iStock.com/loooby)

Social Media: Apple’s iCloud Keychain password manager keeps improving, and we now recommend it, especially for those not already using a third-party password manager. Here’s how to use iCloud Keychain to store and enter secure passwords.

Similar Posts

  • CES Random Thoughts

    I talked a bit about the big Consumer Electronics Show last week and it is rapidly fading in the rearview mirror. I have gone to this show every year for the past decade or more. We actually exhibited our Chill Pill speakers and Hammerhead products at one CES but mostly I have come as a “buyer” to look for new products and trends.

    The Las Vegas convention center is a gigantic venue and the CES show spills out into the parking lot in front but also into some of the surrounding hotels and resorts. The Sands convention center was the second largest and housed some of the more interesting booths. This was the location for 3D printing, health care, fitness, home automation, robots and drones. There were sophisticated baby monitors, constant reporting thermometers, implanted blood glucose monitors and even a company that sold wireless sensors that monitor your soil’s nutrients and moisture. Home automation was huge with several competing standards vying to challenge Apple’s HomeKit. This year more companies were showing HomeKit compatible products so I think that Apple’s vision of your interconnected home is not far off.

    There are lots of ways to move from the Sands over to the LVCC but the best way is the free buses offered by CES. Cabs and the monorail are possible but the buses seem to be the fastest and they are free and comfortable. For me it was a great way to rest my weary feet for a few minutes before going to the other venue to continue walking through the crowds. At the convention center there are three main halls and the international pavilion over at the Westgate (formerly, Hilton). The Center hall is dominated by the big guys with gigantic booths for Samsung, Intel, LG and others. Those booths are usually mobbed so I quickly walked through to check out the TVs and moved on. The North Hall is where the iLounge was born and products for iPad and iPhone dominate that section. The biggest part of the North Hall, however, was the Auto section with concept cars being shown my several manufacturers including Ford, Audi, Mercedes and new electric car upstart Faraday.

    In the past several years the iLounge area and the international area were dominated by all sorts of cases for iPhones and iPads. This year there were a few in each section but cases were definitely not the dominate category. Over at the international pavilion there were lots of hover boards but unlike previous years, demos of the scooters were restricted to the booth area. Nevertheless, all sorts of scooters were being shown. I searched for interesting USB-C products and found some hubs that were not quite ready for prime time and a bunch of cables. I did see the USB-C displays that incorporate a hub and that could be the real solution for the office set-up for the USB-C equipped MacBook.

    I never seem to be able to coordinate my meetings by hall. It seems that I’ll have one meeting in the North Hall, the next in the South Hall and then another back at the hotel. I rode the buses a lot and got to see the whole show floor that way.

    I did find some interesting products that we may add to our offerings, and had some great meetings so it was worthwhile to visit this show that is a window on future technology.

  • Expand your mind…er..text

    Speed Up Your Fingers with Text Expansion

    With all the advances in computing and communications, it’s amazing that–after nearly 150 years!–we still use the keyboard layout from the world’s first practical typewriter for entering text into our Macs, iPhones, and iPads. Sure there are some improving dictation solutions out there but typing is by far how we input text. But we have not gotten that much better as typists, nor do we enjoy typing more–if anything, we increasingly abbreviate to avoid typing, hence “LOL, BRB, etc.” Text messaging aside, wouldn’t it be nice to be able to type less without compromising meaning or making your text look like it was composed by a trained monkey? Thanks to text expansion features built into OS X and iOS, and extended with third-party utilities, you can.

    For basic text expansion capabilities in OS X, look in System Preferences > Keyboard > Text, and in iOS 9, go to Settings > General > Keyboard > Text Replacement. For both, you can enter a phrase, and a shortcut that expands into that phrase when typed and followed by a space or punctuation character. (Tip: If text expansion doesn’t work in a Mac app like Mail or Safari, make sure Edit > Substitutions > Text Replacement is selected.)

    If you’re signed into the same iCloud account on both your Mac and your iPhone, for instance, the text expansions sync between them automatically. So, you can type “smh” and tap the Space bar to get “Shaking my head!” typed out for you, regardless of what device you’re using. (Another tip: don’t create abbreviations that you will also want to type normally. It might seem like a good idea to use “np” for “No Problem,” but that will get in the way of talking about Nurse Practitioners.)

    With such a useful feature built into OS X and iOS, why would you want to spend money on a third-party utility, like “**TextExpander**”:https://smilesoftware.com/textexpander (Mac and iOS), “**Typinator**”:http://www.ergonis.com/products/typinator/ (Mac), or “**TypeIt4Me**”:http://www.ettoresoftware.com/products/typeit4me/. Unfortunately, OS X’s text expansion feature doesn’t work in all apps (it likely won’t work if the app lacks the Edit > Substitutions > Text Replacement menu command). The interface for creating new substitutions is cramped and hard to work with, you can’t configure the trigger characters that cause abbreviations to expand, and you can’t include text with styles, variable text like the date, or even graphics.

    That’s where text expansion utilities shine. They can include styled text and graphics in expansions, insert the current date and time, respect case when expanding abbreviations, include the contents of the clipboard in expanded text, automatically fix common typos, create fill-in-the-blanks snippets that you customize on each expansion, and much more.

    Here are some ideas for the kinds of things you might want to turn over to your computer for typing:
    Long or complex words or phrases, such as scientific names. Aedes aegypti, anyone?

    *Your address, phone number, and email address. One of my favorites is “@d” which inserts my email address. I get real tired of typing email address, phone numbers, etc. Text expansion speeds that up!

    *Boilerplate text for common email replies.

    *The current date and/or time.

    *Special characters, so blb could expand to the British pound symbol £.

    *Unix commands for Terminal, such as using ssh to log in to a remote computer.

    I am sure you can come up with dozens that might work for you and speed up your typing. So think about what bit of text you might want expand automatically and give text expansion a try today!

  • Your Kibbles & Bytes Team,

    _Don, Emily & Dean_

  • _Dear Friends_,

    I am in Las Vegas at the Consumer Electronics Show and it is bigger than ever. My Apple watch is happy with all the walking I am doing but my feet are not feeling the love. The show is a great way to see what is on the horizon and of course, I had meetings interspersed with walking the show floor. Naturally, the meetings were far apart so I spent a lot of time walking or on buses or cabs.

    This show is pretty different from previous years but still is window to future products. See my short report below and I will follow up next week in Kibbles with a more in-depth look. This week’s kibbles exclusive special is a “refurbished 13-inch MacBook Air with a 512GB hard drive bundled with Applecare and a 2TB Time Capsule for $1759.99”:http://www.smalldog.com/wag900002113/special-save-150-on-refurbished-mac-bundle-and-keep-it-safe The MacBook Air is one of my most favorite laptops and this refurbished bundle is a great way to upgrade your mac and ensure your data is secure for the new year!