the password management system in OS X

learn more… | top users | synonyms

23
votes
6answers
7k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
21
votes
4answers
49k views

How can I add a private key to my keychain?

I am trying to add myRepositoryKey to my Mac keychain utility so . I exported this item in OpenRSA format from Putty. When I try to use Import Items, the file is unselectable. What do I need to do to ...
18
votes
4answers
37k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
17
votes
5answers
17k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
15
votes
3answers
109k views

OSX is repeatedly asking for login keychain password

After starting up my newer iMac it's asking for for the login keychain password for several applications. It is stuck in a cycle that I can't cancel out of. Any suggestions?
14
votes
4answers
7k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
14
votes
1answer
3k views

How can I disable SSH KeychainIntegration in OS X Mavericks?

I'm having some issues with SSH KeychainIntegration in OS X Mavericks. I've tried poking around Apple's support site, but haven't seen anyone having my issue. I have seen lots of people who ...
13
votes
6answers
3k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, ...
13
votes
1answer
51k views

What is accountsd and why does it want to use the “login” keychain?

Periodically, I'm seeing this keychain dialog pop up: I click 'Cancel', then it pops up again, then I click 'Cancel' again, and it goes away for a while. (Maybe an hour or two, I haven't timed ...
12
votes
2answers
2k views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
12
votes
6answers
19k views

Export keychains

in order to migrate to an Ubutun, I would like to export all my password, to for example a CSV file. In Keychain Access, I found export menu, but it's alway disabled, even when the access is ...
12
votes
1answer
22k views

OS X Keychain keeps prompting me for my SSH passphrase even though I save it (OS X 10.6.8) [duplicate]

Every time I log in to a remote server with SSH, OS X keychain prompts me to remember the SSH passphrase. I type in the passphrase and check the box to remember it. I then connect ok to the server but ...
11
votes
2answers
11k views

Junos Pulse Crashing on El Capitan (10.11), Causing Keychain Issues?

Whenever I attempt to start a VPN Connection with Junos Pulse (Version 5.0.11) on El Capitan it freezes midway through connecting and my login keychain becomes inaccessible to any other apps. The only ...
11
votes
2answers
87k views

How can I retrieve a saved WiFi password from iOS 7 and newer?

I have some wireless networks that I joined on my iOS device and I now want to retrieve the passwords from the device. How can I (by hook or crook if necessary) get into the iOS 7 or iOS 8 keychain ...
11
votes
5answers
9k views

Selectively disable iCloud keychain syncing for WiFi passwords

I have iCloud Keychain sync enabled, but I want to stop it syncing WiFi passwords. I have a portable WiFi hotspot which I use for my laptop and iPad, but I don't want my iPhone to connect to it since ...
11
votes
2answers
10k views

How do I remove many system roots from Apple System Keychain?

The Apple keychain application will not let you remove system roots, it will only allow you to disable them. It will only allow you to disable them one at a time. For each one, you need to go through ...
11
votes
1answer
7k views

Where has “Keychain First Aid” gone?

On my machine running OS X El Capitan, there is no "Keychain First Aid" option in the Keychain Access app. All documentation, including Mac OS Help in El Capitan, says to go to the Keychain Access ...
10
votes
3answers
2k views

Make my password protected SSH key expire or timeout after a while

I have a private SSH key I use for authentication that is stored in *~/.ssh/id_rsa*. When I ssh into a server, I am prompted for the password to unlock the key: I like this. I also like that I can ...
10
votes
1answer
19k views

Import certificates into the System Keychain via the command line

Is it possible to copy a certificate to a machine running OS X Snow Leopard, add it to the System Keychain, then set it to "Always Trust via SSH?" And if so... how?
10
votes
3answers
20k views

How to tell Google Chrome to use my Keychain

Background: Story: A colleague of mine told me about 1Password and it seems good to me. I am always trying to use tools which Mac OS X itself gives me, so I've given the Keychain a try. It seems ...
10
votes
1answer
2k views

How can I undo “always allow” in keychain item

By mistake, I clicked on "always allow" on a file in my keychain on the Mac. How do I undo this and restrict access? I tried to correct it by clicking on Access Control. There I selected "confirm ...
9
votes
5answers
59k views

How to setup Gmail SMTP server for OSX Mail with 2-step-verification and App-specific password?

Haven't been able to solve this problem with the threads such as here. My Gmail stops always working after a while, perhaps after accessing it in different WIFI network or something like this -- it ...
9
votes
3answers
2k views

OS X 10.11 unable to press “allow” on Keychain Access dialogs

I'm running into an issue where keychain password verification box does not verify password - does not shake for incorrect password and nothing happens when I press "allow". I'm using iCloud keychain. ...
9
votes
1answer
7k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
9
votes
1answer
819 views

The OS X GUI won't accept any passwords (but the command line will)

The graphical side of OS X has stopped accepting passwords for any account. I am definitely typing them right, but the password box just wiggles "no." And here's the weird part: I can log in from ...
9
votes
2answers
463 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
8
votes
1answer
22k views

Should time machine backups be encrypted

I am new to the Mac and was setting up my Time Machine. However, it seems Time Machine also backs up information in the keychain. I was wondering if that means I should use an encrypted disk to store ...
8
votes
5answers
2k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
8
votes
1answer
9k views

Is there a way to generate random passwords in Safari, without iCloud?

I know that iCloud Keychain has a feature where it offers to generate strong, random passwords directly in Safari. Some third-party password managers allow it, but I'd prefer to store the password in ...
8
votes
2answers
14k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
8
votes
3answers
522 views

How can I figure out which keychain entries a process wants access to

I'm getting really tired of seeing this: As I understand it, ubd (the Ubiquity daemon) is responsible for the “Documents and Data” portion of iCloud's syncing. However, all of my iCloud-related data ...
7
votes
6answers
24k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
7
votes
3answers
5k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
7
votes
1answer
36k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
7
votes
2answers
727 views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
7
votes
3answers
13k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
7
votes
2answers
3k views

How can I tell Mobile Safari to stop remembering to never remember my password?

I've changed my mind about having Safari/iCloud Keychain never remember my password for a given website. I'd like to remove that setting and store the password, but I can't find any ability to ...
7
votes
2answers
268 views

Can I make unlocking the screensaver also unlock the login keychain?

I have the screen saver on my Mac password protected, but unlocking the screen saver does not unlock the login keychain. I know this because I get asked to unlock the login keychain shortly after ...
6
votes
2answers
7k views

Move items from old keychain to new keychain

I've just done a clean Mountain Lion install, and one thing bothers me a lot: How can I move passwords from my old keychain to the one created by the installer when it performed a clean install ...
6
votes
2answers
32k views

How to stop my machine asking for multiple passwords when I log in?

Ever since I changed my user account password, every time I log in to my machine I have to enter multiple passwords. First, I enter the new account password to actually log in. Once I'm at my desktop ...
6
votes
4answers
31k views

Unable to sign out of iCloud on OSX Yosemite or disable Keychain

Background This appears to be an ongoing problem with many people.. In short, I'm getting a ton of errors in my system.log along the lines of: CloudKeychainProxy[307]: __39-[UbiqitousKVSProxy ...
6
votes
2answers
6k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
6
votes
1answer
4k views

Saved passwords in Safari keep coming back

So I had saved some some passwords in my Safari on my Mac (Mavericks). I went to Safari > Preferences > Passwords > Remove All to remove all the stored passwords. But no matter how many times ...
6
votes
2answers
2k views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
6
votes
2answers
2k views

Encrypted external drive usually prompts for password, despite being in keychain

I have an external encrypted drive, and almost every time I plug it in, it'll ask me for the password, even though it's already in my keychain. If I type the password in, it'll mount as expected. ...
6
votes
1answer
881 views

How does keychain restore work in other idevice?

app A stores passwords in keychain programmatically. One password is stored in one keychain item. Keychain item is a class of type Generic Password. app A is installed & used in idevice1 & ...
6
votes
0answers
71 views

Google chrome wants to use the keychain password frequently [duplicate]

Google chrome wants to use the keychain password frequently in my mac system(OSX version 10.9.2). Before updating the OS to new version, the applications like Textedit, Preview are used to ask the ...
5
votes
3answers
4k views

OS X (Yosemite) offline password manager

I am fairly new Mac user, so sorry for a newbie question. I work as a webdev and i have hundreds of login credentials for websites/FTPs/cPanels for different clients and so far i used a text document ...
5
votes
1answer
16k views

Is it possible to view passwords through Terminal?

Does anyone know how to view passwords in Terminal? Maybe by accessing the Keychain data or something? I want to be able to view passwords in Terminal with just a series of commands.
5
votes
2answers
3k views

Keychain won't remember my SSH password when connecting to server

I routinely develop on two different servers. One server requires my private SSH key stored in ~/.ssh/id_rsa. This part of the story works fine. The other server should not require any SSH keys, yet ...