Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone.

Is it possible to still be able to use Keychain passwords and autofill, but prevent access by the 4 digit code (e.g. requiring the full Keychain/iCloud password), so that someone who knows your phone code is not able to access all of your internet passwords in plain text?

EDIT: it is possible to set a different 4 digit code as the "Keychain pin" via turning on Settings/iCloud/Keychain/Advanced/"Approve with Security Code", but the phone 4 digit code is still used for accessing the saved Safari passwords as above... It would be great if there was a way to always require the "Keychain pin" instead.

RELATED: the analogous problem on Mac OS X: How to prevent Safari saved passwords being seen with Mac password?.

  • 5
    This is an excellent point. I just submitted feedback to Apple, everyone else reading should as well... Several people know my 4 digit passcode for various reasons, that doesn't mean the need to be able to lookup my bank password, and read it in plain text. apple.com/feedback – Tyson May 31 '15 at 15:07
  • 4
    Another good reason to use something like 1password or equivalent. I don't save any passwords in the browser. – KenB Jun 1 '15 at 19:33
  • @Tyson - [others ought to get an auto-notify] I'm not going to go right through this procedure myself, because I don't want yet another password/code to have to remember… but - Settings/iCloud/Keychain/Advanced/"Approve with Security Code" below that is 'Change Security Code' which starts by asking your Apple ID p/w.. I cancelled at that point, but someone might want to investigate further... – Tetsujin Jul 11 '15 at 9:35

I hate to reference unreleased software, but quite frankly the solution may be for you to enroll now in the iOS 9 public beta or simply wait for it's official Fall release. iOS 9 (at least in its current state) gives the option to set a custom alphanumeric password in place of the familiar 4-digit pin.

So, if you have hardware with touch ID capability you could use that for your everyday login and reserve a more complex passcode (even the same as your iCloud one, like you mention) for protecting your keychain in case of theft, etc.

  • 2
    iOS has had the alphanumeric passcode capability since iOS 4. iOS 9 introduced six-digit numeric passcodes. – DDPWNAGE Jul 27 '15 at 3:30

Simply use an alphanumeric passcode.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.