11

I am trying to copy iCloud web form passwords to a local keychain as per this tutorial.

However, I keep on getting the following error. enter image description here

Text:

An error has occurred. Unable to add an item to the current keychain.

One o more parameters passed to a function were not valid.

[Cancel]                                     [   Ok   ]

When copying and pasting from login, it works successfully so the problem must be related to iCloud Keychains.

Other people have encountered this problem:

but most interesting is this post

Update:

Contacted Apple Support. They couldn't figure out so an engineer is gonna take a look at log files.

0

2 Answers 2

10

Engineer responded with something like "While third parties may support exporting from iCloud and previous versions may support it, current macOS versions doesn't support it by default. But it maybe supported in future.".

Based on how low level the error message is, I suspect that this feature was broken unintentionally and Apple is just too lazy to fix it. I interpret the engineer's statement as something to the effect of "Oops, we broke some really useful thing that some people used, and we are too lazy to fix it so I am just gonna say its not supported anymore, but give a cushion of 'we may support in the future' incase someone complains enough and we do decide to put it back in.".

Pretty annoyed tbh. It appears...

Due to Apples special encryption method used for iCloud keychains, it is nearly impossible for a third party to decrypt it, even with the password and due to whatever reason, Apple has stopped supported exporting to local keychain, which can be decrypted by third parties.

After looking more into it, the entire implementation seems to be open source. If anyone with the skill would like to take the time to figure out how to decrypt it, that'd be pretty cool. Here's the links:

https://opensource.apple.com/tarballs/Security/

https://opensource.apple.com/source/Security/

3
  • Is your last paragraph cynical? Anyway, did you find a solution to this issue?
    – gen
    Oct 24, 2020 at 2:12
  • 2
    I sincerely appreciate your posting this. “Oh darn, we broke an export / exfiltration tool” energy detected.
    – bmike
    Dec 24, 2020 at 22:21
  • @JBis It is, uh, technically open source, with an emphasis on technically, because actually compiling it requires access to closed-source code. (Or reverse-engineering that code.) apple.stackexchange.com/a/399650/150839 Mar 3, 2021 at 23:43
2

https://1password.community/discussion/30286/mrcs-convert-to-1password-utility-mrc-converter-suite

You'll find a dropbox link there. Download it, and follow the instructions to run the AppleScript for Safari 11/12. It will run for a while and collect every password item from Safari preferences and in the end, write them to a CSV file.

That can be converted further to other password manager formats including Chrome, Firefox, 1password etc.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .