the password management system in OS X

learn more… | top users | synonyms

30
votes
6answers
8k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
27
votes
4answers
57k views

How can I add a private key to my keychain?

I am trying to add myRepositoryKey to my Mac keychain utility so . I exported this item in OpenRSA format from Putty. When I try to use Import Items, the file is unselectable. What do I need to do to ...
23
votes
4answers
167k views

OSX is repeatedly asking for login keychain password

After starting up my newer iMac it's asking for for the login keychain password for several applications. It is stuck in a cycle that I can't cancel out of. Any suggestions?
20
votes
4answers
8k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
20
votes
6answers
47k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
17
votes
5answers
19k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
17
votes
3answers
6k views

OS X 10.11 unable to press “allow” on Keychain Access dialogs

I'm running into an issue where keychain password verification box does not verify password - does not shake for incorrect password and nothing happens when I press "allow". I'm using iCloud keychain. ...
17
votes
1answer
26k views

Where has “Keychain First Aid” gone?

On my machine running OS X El Capitan, there is no "Keychain First Aid" option in the Keychain Access app. All documentation, including Mac OS Help in El Capitan, says to go to the Keychain Access ...
17
votes
1answer
3k views

How can I disable SSH KeychainIntegration in OS X Mavericks?

I'm having some issues with SSH KeychainIntegration in OS X Mavericks. I've tried poking around Apple's support site, but haven't seen anyone having my issue. I have seen lots of people who ...
16
votes
6answers
23k views

Export keychains

in order to migrate to an Ubutun, I would like to export all my password, to for example a CSV file. In Keychain Access, I found export menu, but it's alway disabled, even when the access is unlocked....
14
votes
7answers
12k views

Selectively disable iCloud keychain syncing for WiFi passwords

I have iCloud Keychain sync enabled, but I want to stop it syncing WiFi passwords. I have a portable WiFi hotspot which I use for my laptop and iPad, but I don't want my iPhone to connect to it since ...
14
votes
6answers
4k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, you'...
14
votes
1answer
24k views

Import certificates into the System Keychain via the command line

Is it possible to copy a certificate to a machine running OS X Snow Leopard, add it to the System Keychain, then set it to "Always Trust via SSH?" And if so... how?
14
votes
1answer
77k views

What is accountsd and why does it want to use the “login” keychain?

Periodically, I'm seeing this keychain dialog pop up: I click 'Cancel', then it pops up again, then I click 'Cancel' again, and it goes away for a while. (Maybe an hour or two, I haven't timed it.)...
13
votes
3answers
29k views

How to tell Google Chrome to use my Keychain

Background: Story: A colleague of mine told me about 1Password and it seems good to me. I am always trying to use tools which Mac OS X itself gives me, so I've given the Keychain a try. It seems ...
12
votes
2answers
3k views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
12
votes
1answer
28k views

OS X Keychain keeps prompting me for my SSH passphrase even though I save it (OS X 10.6.8) [duplicate]

Every time I log in to a remote server with SSH, OS X keychain prompts me to remember the SSH passphrase. I type in the passphrase and check the box to remember it. I then connect ok to the server but ...
11
votes
3answers
2k views

Make my password protected SSH key expire or timeout after a while

I have a private SSH key I use for authentication that is stored in *~/.ssh/id_rsa*. When I ssh into a server, I am prompted for the password to unlock the key: I like this. I also like that I can ...
11
votes
2answers
14k views

Junos Pulse Crashing on El Capitan (10.11), Causing Keychain Issues?

Whenever I attempt to start a VPN Connection with Junos Pulse (Version 5.0.11) on El Capitan it freezes midway through connecting and my login keychain becomes inaccessible to any other apps. The only ...
11
votes
2answers
89k views

How can I retrieve a saved WiFi password from iOS 7 and newer?

I have some wireless networks that I joined on my iOS device and I now want to retrieve the passwords from the device. How can I (by hook or crook if necessary) get into the iOS 7 or iOS 8 keychain ...
11
votes
5answers
63k views

How to setup Gmail SMTP server for OSX Mail with 2-step-verification and App-specific password?

Haven't been able to solve this problem with the threads such as here. My Gmail stops always working after a while, perhaps after accessing it in different WIFI network or something like this -- it ...
11
votes
2answers
12k views

How do I remove many system roots from Apple System Keychain?

The Apple keychain application will not let you remove system roots, it will only allow you to disable them. It will only allow you to disable them one at a time. For each one, you need to go through ...
11
votes
1answer
25k views

Should time machine backups be encrypted

I am new to the Mac and was setting up my Time Machine. However, it seems Time Machine also backs up information in the keychain. I was wondering if that means I should use an encrypted disk to store ...
10
votes
1answer
2k views

How can I undo “always allow” in keychain item

By mistake, I clicked on "always allow" on a file in my keychain on the Mac. How do I undo this and restrict access? I tried to correct it by clicking on Access Control. There I selected "confirm ...
9
votes
6answers
29k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
9
votes
2answers
3k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
9
votes
2answers
17k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
9
votes
1answer
8k views

How can I access the keychain remotely from the command line?

I am storing various passwords (e.g. for remote email servers) in my keychain. From the command line, when logged in locally, I can retrieve these via: security unlock-keychain ~/Library/Keychains/...
9
votes
1answer
7k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
9
votes
1answer
926 views

The OS X GUI won't accept any passwords (but the command line will)

The graphical side of OS X has stopped accepting passwords for any account. I am definitely typing them right, but the password box just wiggles "no." And here's the weird part: I can log in from >...
9
votes
2answers
573 views

How to prevent keychain passwords being seen with iPhone passcode?

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone. Is it possible to still be able to use Keychain passwords and ...
8
votes
5answers
2k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
8
votes
1answer
10k views

Is there a way to generate random passwords in Safari, without iCloud?

I know that iCloud Keychain has a feature where it offers to generate strong, random passwords directly in Safari. Some third-party password managers allow it, but I'd prefer to store the password in ...
8
votes
3answers
13k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
8
votes
3answers
531 views

How can I figure out which keychain entries a process wants access to

I'm getting really tired of seeing this: As I understand it, ubd (the Ubiquity daemon) is responsible for the “Documents and Data” portion of iCloud's syncing. However, all of my iCloud-related data ...
7
votes
3answers
5k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
7
votes
2answers
8k views

Move items from old keychain to new keychain

I've just done a clean Mountain Lion install, and one thing bothers me a lot: How can I move passwords from my old keychain to the one created by the installer when it performed a clean install ...
7
votes
2answers
51k views

How to stop my machine asking for multiple passwords when I log in?

Ever since I changed my user account password, every time I log in to my machine I have to enter multiple passwords. First, I enter the new account password to actually log in. Once I'm at my desktop ...
7
votes
1answer
41k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
7
votes
4answers
40k views

Unable to sign out of iCloud on OSX Yosemite or disable Keychain

Background This appears to be an ongoing problem with many people.. In short, I'm getting a ton of errors in my system.log along the lines of: CloudKeychainProxy[307]: __39-[UbiqitousKVSProxy ...
7
votes
1answer
49k views

Cloudd wants to use the “Local items” keychain

I opened my MBP and certainly the system gives the following warning "Cloudd wants to use the "Local items" keychain" and asks me for my keychain-password. After cancelling this warning, it kept ...
7
votes
2answers
4k views

How can I tell Mobile Safari to stop remembering to never remember my password?

I've changed my mind about having Safari/iCloud Keychain never remember my password for a given website. I'd like to remove that setting and store the password, but I can't find any ability to delete/...
7
votes
2answers
286 views

Can I make unlocking the screensaver also unlock the login keychain?

I have the screen saver on my Mac password protected, but unlocking the screen saver does not unlock the login keychain. I know this because I get asked to unlock the login keychain shortly after ...
6
votes
2answers
7k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
6
votes
1answer
5k views

Saved passwords in Safari keep coming back

So I had saved some some passwords in my Safari on my Mac (Mavericks). I went to Safari > Preferences > Passwords > Remove All to remove all the stored passwords. But no matter how many times ...
6
votes
2answers
2k views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
6
votes
2answers
10k views

How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?

It seems that ssh-add -K ~/.ssh/id_rsa will load your key but will ask for the password each time you reboot. I am looking for a solution that would not require me to re-enter the key password ...
6
votes
2answers
3k views

Encrypted external drive usually prompts for password, despite being in keychain

I have an external encrypted drive, and almost every time I plug it in, it'll ask me for the password, even though it's already in my keychain. If I type the password in, it'll mount as expected. ...
6
votes
1answer
908 views

How does keychain restore work in other idevice?

app A stores passwords in keychain programmatically. One password is stored in one keychain item. Keychain item is a class of type Generic Password. app A is installed & used in idevice1 & ...
6
votes
0answers
71 views

Google chrome wants to use the keychain password frequently [duplicate]

Google chrome wants to use the keychain password frequently in my mac system(OSX version 10.9.2). Before updating the OS to new version, the applications like Textedit, Preview are used to ask the ...