iCloud Keychain

“tooling like 1Password or Apple Keychain that lets you share MFA comes into play”

“I'm not super stoked about how basic Apple's password management is, and how few fields there are for each profile.”

“they're synchronized to my Apple account so that's not an issue”

“They are synced to iCloud Keychain, which is E2E encrypted.”

“The apple ecosystem has really good syncing between devices but only when they share an iCloud account.”

“having read through the white paper of how iCloud Keychain works I personally trust iCloud Keychain/Passwords about as much as I trust 1Password”

“I think the iCloud password manager also works pretty well, provided you're using Apple products.”

“The UX is obviously a lot smoother if you have an iPhone and use iCloud keychain for everything”

“My key is on iCloud and it can be unlocked with my many recovery methods and contacts”

“most people use iCloud or their Google account to store their passkeys, and because those sync everywhere, this isn't a real risk”

“My passkey is synched with iCloud which has all hardened settings set to on, so if I switch devices (I have) its seamlessly.”

“Just like their iCloud Keychain API that lets apps secretly track users across app reinstalls and device resets.”

“Mac OS's keychain I use as a daily driver on my windows gaming desktop?”

“For important websites, I recommend saving additional passkeys to Keychain”

“it will ask you to put it in your iCloud Keychain. Boom, now it is available across all of those”

“For years Apple has let and helped Facebook, TikTok etc. track users even after you delete an app”

“If you have iCloud Keychain enabled you don't have to "remember" a sign-in at all.”

“This is a win for privacy-intruders, not users, just like Apple's iCloud Keychain API that has allowed Facebook”

“I've just used Apple's Keychain continuously since 2004”

“over a first party password manager with a CLI that comes with the OS”

“Keychain is one of the worst APIs on Apple platforms, with parts that date all the way back to MacOS 9.”

“Apple Keychain has a number of old bugs that have caused me to have to resort to this strategy several times.”

“It Just Works™... until you don't want to take the default option.”

“you won't be able to tell the difference between my old phone and new phone”

“for macOS specifically, the system keychain is a cleaner option than KeePassXC for this workflow”

“letting Facebook and TikTok secretly track you across devices and reinstalls with their iCloud Keychain API”

“Apple has allowed Facebook, TikTok etc. to track users across devices AND device resets via the iCloud Keychain API.”

“leaving me with only Apple's as a high-functioning, high-trust option”

“the provider (Apple in this case) has full control over who you are allowed to export your keys to”

“Don’t lock yourself in apple ecosystem especially in such important thing as password management.”

“If you're in the Apple ecosystem, password and passkey management via iCloud is included.”

“Apple does do end-to-end encryption by default on other critical information that would be painful to lose, such as your account passwords stored in Keychain.”

“Apple has that figured out. Your keys can be stored in your cloud synced keychain but only you can decrypt that keychain.”

“Apple cannot see the contents of your synced keychain.”

“They work on all my apple devices seamlessly.”

“Safari passwords ... is all built in, requires no third-party software, can be local-only, allows plaintext export/import”

“it's a fantastic solution for the vast majority of the population”

“Isn't a perfect solution but, again, is pretty good for most people.”

“my work macOS keychain maimed itself in such a way that I need to recreate it every time I install an OS update”

“pure usability was a solved problem around by the turn of the century”