Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What key does it use to encrypt the stored passwords? If it uses the phone's unlock code, what key does it use for phones that don't have one set up?

If someone had access to the hard drive contents (e.g. by connecting it to a Linux machine), how easy would it be for them to decrypt the saved passwords?

share|improve this question

Not a direct answer but I too had similar concerns. With IOS 4.2, they have enabled the remote wipe ability for all iphone4 users via MobileME. So at least, if you lose your phone, you can have it wiped out remotely.

share|improve this answer
up vote 2 down vote accepted

According to an article on Yahoo News, there are known exploits for Apple's keychain, which would allow an attacker to gain access to passwords stored on the iPhone. I believe that Safari uses keychain to store the username/passwords you tell it to remember.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.