33

On my machine running OS X El Capitan, there is no "Keychain First Aid" option in the Keychain Access app.

All documentation, including Mac OS Help in El Capitan, says to go to the Keychain Access menu and select Keychain First Aid. But my Keychain Access menu looks like this:

enter image description here

Where is Keychain First Aid??

|improve this question
  • 4
    Any way to replace this functionality? – wordsmythe Jan 11 '16 at 17:31
10

It's possible that it was removed in the OS X 10.11.2 update. Reference: Keychain First Aid appears to be missing after 10.11.2 update!

From About the security content of OS X El Capitan 10.11.2, Security Update 2015-005 Yosemite, and Security Update 2015-008 Mavericks:

Keychain Access

Available for: OS X El Capitan v10.11 and v10.11.1

Impact: A malicious application may be able to masquerade as the Keychain Server. Description: An issue existed in how Keychain Access interacted with Keychain Agent. This issue was resolved by removing legacy functionality.

CVE-ID CVE-2015-7045

|improve this answer
  • 7
    How the heck do I repair my keychain now !!! The laptop is completely unusable. – javadba Jul 14 '16 at 14:29
8

Starting in OSX 10.11, you will need to open the Keychain Access app and go to Preferences > Reset My Default Keychain. "Reset" is a bit of misnomer; actually, it will move your old keychain to a separate database file, and create a new, clean keychain.

Next, if you do File > Add Keychain, you can re-add your old keychain (for example, login_renamed_1) to the viewer. You can then manually copy over your keys from the old keychain to the new keychain.

You will have to re-enter your root password for each key that you copy, and it will throw errors at you, but in the end they will get copied over.

|improve this answer
  • You can speed up the process considerably by changing the imported keychain's password to blank before dragging the desired passwords into the new keychain. Then you can simply press Return or automate clicking of the Allow button by positioning the cursor over it and running clickclick, e.g., while : ; do cliclick c:. w:500; done, which will click at the current cursor position every half second. – Miles Wolbe Jun 4 at 1:26
7

In Mac OS X 10.11 El Capitan, Keychain errors can be fixed by deleting all files and folders in ~/Library/Keychains/ and rebooting.

Guides that suggest "first aid" and renaming keychain files are misguided or outdated.

|improve this answer
  • 2
    It's not necessary to delete all files and folders, just any folder with a long guid-like name (e.g. A8E5321F-62CC-5BED-8B31-DE0526C484BD). techraptor.net/content/… – Jason Jul 7 '17 at 14:24
  • 2
    Not so sure about this advice. I lost all my keychain items. Fortunately I just moved them instead of deleting them... – Paul S Feb 5 '18 at 17:48
  • Thanks - yes this resets all the saved passwords, but it got the keychain working again which is what I wanted first aid for. – geedoubleya Oct 22 '18 at 10:42
  • 3
    I'd really recommend not following this advice except as a last resort. This is just a crude way of erasing all your keychain data and starting from scratch but might have other unintended consequences. (For example, if you're using full disk encryption this will cause more issues on reboot) A cleaner way to do the almost the same thing is just open "Keychain Access", go to its Preferences window (⌘+`), and then click the "Reset My Default Keychain". Here's a screenshot: dropbox.com/s/0sb9o7ho75oh7ks/… – Chris Feb 2 at 0:43

You must log in to answer this question.

protected by Community♦ Jan 17 '16 at 10:38

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged .