the password management system in OS X

learn more… | top users | synonyms

18
votes
3answers
28k views

How can I add a private key to my keychain?

I am trying to add myRepositoryKey to my Mac keychain utility so . I exported this item in OpenRSA format from Putty. When I try to use Import Items, the file is unselectable. What do I need to do to ...
15
votes
5answers
11k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
14
votes
1answer
1k views

How can I disable SSH KeychainIntegration in OS X Mavericks?

I'm having some issues with SSH KeychainIntegration in OS X Mavericks. I've tried poking around Apple's support site, but haven't seen anyone having my issue. I have seen lots of people who ...
12
votes
4answers
4k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
10
votes
1answer
13k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
8
votes
2answers
60k views

How can I retrieve a saved WiFi password from iOS 7?

I have some wireless networks that I joined on my iOS device and I now want to retrieve the passwords from the device. How can I (by hook or crook if necessary) get into the iOS 7 keychain and obtain ...
8
votes
4answers
3k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
8
votes
5answers
2k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
8
votes
1answer
5k views

How do I remove many system roots from Apple System Keychain?

The Apple keychain application will not let you remove system roots, it will only allow you to disable them. It will only allow you to disable them one at a time. For each one, you need to go through ...
8
votes
1answer
320 views

The OS X GUI won't accept any passwords (but the command line will)

The graphical side of OS X has stopped accepting passwords for any account. I am definitely typing them right, but the password box just wiggles "no." And here's the weird part: I can log in from ...
8
votes
3answers
457 views

How can I figure out which keychain entries a process wants access to

I'm getting really tired of seeing this: As I understand it, ubd (the Ubiquity daemon) is responsible for the “Documents and Data” portion of iCloud's syncing. However, all of my iCloud-related data ...
7
votes
2answers
821 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
7
votes
2answers
3k views

Selectively disable iCloud keychain syncing for WiFi passwords

I have iCloud Keychain sync enabled, but I want to stop it syncing WiFi passwords. I have a portable WiFi hotspot which I use for my laptop and iPad, but I don't want my iPhone to connect to it since ...
6
votes
2answers
3k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
6
votes
2answers
500 views

Make my password protected SSH key expire or timeout after a while

I have a private SSH key I use for authentication that is stored in *~/.ssh/id_rsa*. When I ssh into a server, I am prompted for the password to unlock the key: I like this. I also like that I can ...
6
votes
1answer
12k views

Should time machine backups be encrypted

I am new to the Mac and was setting up my Time Machine. However, it seems Time Machine also backs up information in the keychain. I was wondering if that means I should use an encrypted disk to store ...
6
votes
1answer
2k views

Saved passwords in Safari keep coming back

So I had saved some some passwords in my Safari on my Mac (Mavericks). I went to Safari > Preferences > Passwords > Remove All to remove all the stored passwords. But no matter how many times ...
6
votes
2answers
764 views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
6
votes
1answer
9k views

What is accountsd and why does it want to use the “login” keychain?

Periodically, I'm seeing this keychain dialog pop up: I click 'Cancel', then it pops up again, then I click 'Cancel' again, and it goes away for a while. (Maybe an hour or two, I haven't timed ...
6
votes
1answer
9k views

OS X Keychain keeps prompting me for my SSH passphrase even though I save it (OS X 10.6.8) [duplicate]

Every time I log in to a remote server with SSH, OS X keychain prompts me to remember the SSH passphrase. I type in the passphrase and check the box to remember it. I then connect ok to the server but ...
6
votes
1answer
707 views

How does keychain restore work in other idevice?

app A stores passwords in keychain programmatically. One password is stored in one keychain item. Keychain item is a class of type Generic Password. app A is installed & used in idevice1 & ...
5
votes
6answers
7k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
5
votes
2answers
5k views

Move items from old keychain to new keychain

I've just done a clean Mountain Lion install, and one thing bothers me a lot: How can I move passwords from my old keychain to the one created by the installer when it performed a clean install ...
5
votes
3answers
2k views

Export keychains

in order to migrate to an Ubutun, I would like to export all my password, to for example a CSV file. In Keychain Access, I found export menu, but it's alway disabled, even when the access is ...
5
votes
1answer
8k views

Import certificates into System Keychain via the command line

Is it possibly to copy a certificate to machine running to OS X Snow Leopard, add it to the System Keychain, then set it to "Always Trust via SSH?" And if so... how?
5
votes
1answer
296 views

How to I undo “always allow” in keychain item

By mistake, I clicked on "always allow" on a file in my keychain on the mac. How do I undo this and restrict access? I tried to correct it by clicking on Access Control. There I clicked on "confirm ...
5
votes
1answer
2k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
5
votes
2answers
8k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
5
votes
2answers
779 views

Encrypted external drive usually prompts for password, despite being in keychain

I have an external encrypted drive, and almost every time I plug it in, it'll ask me for the password, even though it's already in my keychain. If I type the password in, it'll mount as expected. ...
5
votes
0answers
67 views

Google chrome wants to use the keychain password frequently [duplicate]

Google chrome wants to use the keychain password frequently in my mac system(OSX version 10.9.2). Before updating the OS to new version, the applications like Textedit, Preview are used to ask the ...
5
votes
1answer
762 views

SSH, passphrases, keychains, Could not open a connection to your authentication agent

I will be very surprised if anyone has the answer to this. I have googled for a long time but no luck. As an iOS developer who will shortly be welcoming a new team member I want to set up a ...
5
votes
2answers
219 views

Can I make unlocking the screensaver also unlock the login keychain?

I have the screen saver on my Mac password protected, but unlocking the screen saver does not unlock the login keychain. I know this because I get asked to unlock the login keychain shortly after ...
4
votes
3answers
385 views

OS X (Yosemite) offline password manager

I am fairly new Mac user, so sorry for a newbie question. I work as a webdev and i have hundreds of login credentials for websites/FTPs/cPanels for different clients and so far i used a text document ...
4
votes
2answers
4k views

Is there any way to crack a password-protected disk image?

I have created a .dmg file with password. Unfortunately I forgot the password and I my Google searches have not resulted in a way to reset the password of this .dmg file. Please help me find a ...
4
votes
1answer
6k views

Is it possible to view passwords through Terminal?

Does anyone know how to view passwords in Terminal? Maybe by accessing the Keychain data or something? I want to be able to view passwords in Terminal with just a series of commands.
4
votes
2answers
11k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
4
votes
2answers
2k views

Keychain won't remember my SSH password when connecting to server

I routinely develop on two different servers. One server requires my private SSH key stored in ~/.ssh/id_rsa. This part of the story works fine. The other server should not require any SSH keys, yet ...
4
votes
4answers
22k views

How to setup Gmail SMTP server for OSX Mail with 2-step-verification and App-specific password?

Haven't been able to solve this problem with the threads such as here. My Gmail stops always working after a while, perhaps after accessing it in different WIFI network or something like this -- it ...
4
votes
2answers
5k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
4
votes
1answer
129 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
4
votes
1answer
312 views

iCloud Keychain - view online

Is there any way of viewing the contents of your iCloud Keychain online? After a computer failure, I have no access to my keychain items! I have another laptop running Snow Leopard, but it is not ...
4
votes
1answer
1k views

Why am frequently asked for access to my Keychain?

Since using Migration Assistant to move from an old iMac (2009) to a new MacBook Pro, I find that I'm repeatedly asked for access to my Keychain. Prior to moving to the new machine, once I unlocked my ...
4
votes
1answer
249 views

Can the OS X keychain juggle two accounts for the same site?

I have a different passwords for: www.example.com/foo/login and www.example.com/bar/login It seems as if the keychain only saves the passwords in relation to the sitename as it does not make ...
4
votes
2answers
2k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
4
votes
1answer
299 views

How to move the /Users to an encrypted ZFS drive?

When setting up a ZFS pool on an encrypted CoreStorage volume, a manual typing of the password is required each time for mounting the volume (due to the problem of OS X thinking that the password is ...
4
votes
1answer
5k views

How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?

It seems that ssh-add -K ~/.ssh/id_rsa will load your key but will ask for the password each time you reboot. I am looking for a solution that would not require me to re-enter the key password ...
3
votes
3answers
6k views

Applescript to retrieve account and password using keychain scripting

How can I use keychain scripting to write a script in Applescript that retrieves the login and password of a website from the login keychain, given the website's URL?
3
votes
4answers
736 views

Off-site backup of “login.keychain”

I’m using the Keychain.app to manage all my (website) passwords, and I am also using the “Password assistant” to generate secure random passwords. But obviously I’m paranoid that my laptop is lost or ...
3
votes
2answers
2k views

Warning: “CSUserAgent wants to access data stored in your keychain.”

For my backups I use an encrypted external hard disk. This hard disk has two partitions (names are: Backup, Private). Today, when connecting the backup I was prompted with the following message: ...
3
votes
2answers
4k views

How do I restore the default certificate settings in Snow Leopard?

After the DigiNotar certificate debacle, I tried to remove their certificate from my Keychain. However, I think I deleted the wrong one. I am not sure which one it was, but trying to go to ...