10

Via Settings/Safari/Saved Passwords/ it is possible to view all saved passwords by simply entering the 4 digit passcode on ones iPhone.

Is it possible to still be able to use Keychain passwords and autofill, but prevent access by the 4 digit code (e.g. requiring the full Keychain/iCloud password), so that someone who knows your phone code is not able to access all of your internet passwords in plain text?

EDIT: it is possible to set a different 4 digit code as the "Keychain pin" via turning on Settings/iCloud/Keychain/Advanced/"Approve with Security Code", but the phone 4 digit code is still used for accessing the saved Safari passwords as above... It would be great if there was a way to always require the "Keychain pin" instead.

RELATED: the analogous problem on Mac OS X: How to prevent Safari saved passwords being seen with Mac password?.

Improve this question
7
  • 6
    This is an excellent point. I just submitted feedback to Apple, everyone else reading should as well... Several people know my 4 digit passcode for various reasons, that doesn't mean the need to be able to lookup my bank password, and read it in plain text. apple.com/feedback
    – Tyson
    May 31, 2015 at 15:07
  • 5
    Another good reason to use something like 1password or equivalent. I don't save any passwords in the browser.
    – KenB
    Jun 1, 2015 at 19:33
  • 1
    @Tyson - [others ought to get an auto-notify] I'm not going to go right through this procedure myself, because I don't want yet another password/code to have to remember… but - Settings/iCloud/Keychain/Advanced/"Approve with Security Code" below that is 'Change Security Code' which starts by asking your Apple ID p/w.. I cancelled at that point, but someone might want to investigate further...
    – Tetsujin
    Jul 11, 2015 at 9:35
  • Happy to try this out @Tetsujin but I cannot find where you are seeing this in latest iOS - let me know and I'll experiment
    – Psi
    Mar 14, 2022 at 23:13
  • 1
    @Psi - yeah, it's long-gone. No idea what happened to it.
    – Tetsujin
    Mar 15, 2022 at 7:16

2 Answers 2

Reset to default
1

I hate to reference unreleased software, but quite frankly the solution may be for you to enroll now in the iOS 9 public beta or simply wait for it's official Fall release. iOS 9 (at least in its current state) gives the option to set a custom alphanumeric password in place of the familiar 4-digit pin.

So, if you have hardware with touch ID capability you could use that for your everyday login and reserve a more complex passcode (even the same as your iCloud one, like you mention) for protecting your keychain in case of theft, etc.

Improve this answer
1
  • 2
    iOS has had the alphanumeric passcode capability since iOS 4. iOS 9 introduced six-digit numeric passcodes.
    – DDPWNAGE
    Jul 27, 2015 at 3:30
1

Simply use an alphanumeric passcode.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .