Over time we accumulate numerous usernames and passwords: Gmail, Netflix, Amazon, online banking, iCloud, and so on. We’re occasionally required to recall these usernames and passwords. A ‘system’ is needed to help us manage such login credentials.
Keychain: password management.
Apple devices come with a utility for this very purpose, that stores our passwords and account information, retrieving them as and when required. It’s called Keychain, and it’s actively working in the background all the while.
If you embrace it as a system, it will unite the devices you use, and reduce the number of passwords you have to remember and manage. Utilising Keychain, or any alternative password manager is a step towards simplifying your life.
In this article we’ll look at how Keychain works; how to view your saved passwords; and how to enable iCloud Keychain – used to sync passwords across your devices.
Keychain in action.
Remember when you first joined your home Wifi network and you had to enter a password? The reason you haven’t had to re-enter that password is because it was saved to your Keychain. The same goes for the Mail app: you don’t have to re-enter your email password every 5 minutes because it’s saved in your Keychain.
When creating a new online account, Safari will ask ‘Would you like to save this password?’ If you click the Save Password button it’s saved to your Keychain.
What’s more is, any such saved credentials can automatically make their way over to your other devices, via the iCloud feature, iCloud Keychain. This can be a huge timesaver.
How keychain works
- You switch on your Mac, and enter the password for your macOS user account.
- Once you’ve logged in, the Keychain for your user account is unlocked, and the passwords saved within it are made available to you, and the apps you use.
- Any previously saved passwords will be retrieved automatically when required.
To be in command of your Keychain, and to keep it secure, there’s a few specific accounts / login credentials, that you need to be familiar with. You will want to memorise these credentials (write them down if you must), and keep them private, because anyone who knows them, and has physical access to one of your devices, will be able to view your Keychain’s saved passwords!
The accounts / login credentials you need to memorise, and keep secure, are:
- Your macOS User Account (your computer password, in other words)
- Your iPhone / iPad passcode
- Your Apple ID
(If you’re unsure about any of these accounts, or would like to change a password, just click the appropriate link for directions.)
Once you’ve memorised the above account credentials, you won’t need to memorise most other accounts and passwords, as they’ll be saved to your Keychain.
To fully benefit from Keychain, you need to switch iCloud Keychain on.
There’s just a little more preparing to do. iCloud Keychain is the feature that unites your devices Keychains.
Here’s how Apple describes iCloud Keychain:
“iCloud Keychain keeps your Safari website usernames and passwords, credit card information, and Wi-Fi network information up to date across all of your approved devices that are using iOS 7.0.3 or later or OS X Mavericks 10.9 or later.Source, Apple.
iCloud Keychain can also keep the accounts you use in Mail, Contacts, Calendar, and Messages up to date across all of your Mac computers. And when you sign in to Facebook, Twitter, LinkedIn, and your other Internet accounts, iCloud automatically adds your usernames and passwords to all of your devices.”Source, Apple.
You’ll want to have iCloud Keychain enabled on all of your devices, which you may already have, but check to be sure.
At this point you’ll want to have all, or most of the devices you use at hand, as you may encounter Apple ID or iCloud security procedures, such as two-factor authentication.
To check if iCloud Keychain is enabled on your Mac:
Go to the Apple menu (top left)->System Preferences, and click on iCloud. Ensure Keychain is ticked.
To check if iCloud Keychain is enabled on your iPhone / iPad:
From the Home screen, tap Setting->[Your Name]->iCloud. Ensure Keychain is switch on.
Viewing previously saved passwords in Safari on your Mac.
In Safari, you can view previously saved passwords by going to the Safari menu (top left)->Preferences, and click on the Passwords tab. You’ll be asked to enter your user account password before being able to view the saved passwords.
The above screenshot has been obscured, but clicking any item in the list will reveal the password in the right hand column.
You can see that, without knowing your macOS User Account password, you can’t view your saved passwords. Conversely, anyone who knows your computer user account password will be able to view your saved passwords!
Viewing your passwords in the Keychain Access app on your Mac.
In Safari, you won’t be able to view Wifi passwords or Internet Account credentials. For this we need to use the Keychain Access app instead, which you can find in your /Applications/Utilities folder.
Keychain Access can be quite overwhelming because, in addition to passwords, it also lists lots of other ‘stuff’ that we don’t need to understand, or be concerned with.
To find something in Keychain Access, try doing a search (top right) by typing the first few letters or numbers of the item you’re looking for. It can be a bit like detective work so, use common sense.
Once you’ve found what you’re looking for, double click on the item in the list, and in the resulting window, tick Show Password. You’ll be prompted for your macOS user account password. Once entered, the password will be revealed.
Viewing previously saved passwords on your iPhone / iPad.
To view saved passwords on your iPhone / iPad, go to Settings->Accounts & Passwords->App & Website Passwords.
Everyone needs a system to manage their usernames and passwords. Yes, you can devise your own (e.g. a pen, and a notebook), but that requires more time and discipline to maintain.
Keychain, and iCloud Keychain, takes a bit of understanding, and setting up, in order to get the full benefits. It isn’t perfect but, when it works, it’s very satisfying. What’s more is, if you’ve been actively using Keychain, when you purchase a new device and sign into iCloud, you’ll be delighted by the fact that all your passwords and internet account are carried over, and automatically set up for you.
Some people might be horrified at the thought of saving passwords and credit card information in iCloud. While no internet connected device, or ‘cloud’ based account will ever be entirely safe, the convenience of iCloud outweighs the fear of being hacked, and Apple’s security measures are likely better than anything I could ever come up with (aside from turning everything off). I’ll never be an IT / internet security expert. Therefore I’m happy to use Apple’s free, consumer friendly, security technologies and recommendations.
Keychain isn’t the only password manager. 1Password is a much more capable solution that isn’t limited to passwords. It also works not only on Apple devices, but also Windows and Android, and has Family and Professional / collaborative features.