I'm a developer working on doing some keychain related features. A piece of my application changes / looks for items in the keychain. However, visually verifying some of these changes can be difficult because the Keychain Access.app doesn't show all of the fields. For example, the kSecProtocolItemAttr attribute for internet passwords is not displayed in the Keychain app.

Is there a better way (Command line or other) to visual items that are in a .keychain file, that show all of the properties associated with that item?

1 Answer 1


The CLI for keychains is: security.

It lets you do many things such as…

  • Getting item info:

    security find-generic-password -a <item-name>
  • Getting passwords:

    security 2>&1 >/dev/null find-generic-password -ga <item-name>

Read the man page for more info or do security help.

  • Bingo! This is what I was after: security dump-keychain -d /path/to/keychain.keychain.
    – vcsjones
    Dec 30, 2013 at 17:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .