2

I'm trying to find a way to open the Safari Passwords pane without opening Safari - similar to how Siri opens it when you ask "Show me my passwords" on macOS. Any ideas?

I'm thinking some kind of URL scheme but I cannot find anything for Safari registered in launch services. Get a list with:

/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/Support/lsregister -dump | grep 'bindings:'.'*:'

Ultimately, I am trying to create a service or keyboard shortcut to open the passwords pane to quickly find a password when outside of Safari. I am not trying to bypass user authentication.

Update: Currently working on the assumption that the pane is a part of Safari's SiriKit handler object and so far this is the only way to open the pane outside of Safari, that is, only Siri can open the pane. Does anyone know where the .intentdefinition file is for Safari?

Update 2: Looking at file activity it seems to be an XPC Service. Is there a way to see what launchd is doing there, or replicate the call?

  • TBH/ since the pane is only openable whilst running Safari, I'm not sure how one can open the pane without running Safari. I would guess that Apple is very keen on protecting the contents of the database which stores the passwords from access outside of the carefully coded method they use to keep it secure in Safari. – IconDaemon Dec 14 '19 at 13:28
  • You can access stored passwords in Terminal using the security command so I wouldn't think it'd be a big deal to trigger the passwords preferences pane. – TimD Dec 14 '19 at 14:20
  • I think the pane is a UI element controlled by code in Safari which accesses the security framework data which can also be obtained via the security terminal command. When you look at the password items, you are working with the contents of keychains, both local to the machine and iCloud. If you are trying to open the pane in an attempt to bypass the local user password entry, you may be out of luck. – IconDaemon Dec 14 '19 at 15:24
  • 1
    Those all directly use the system keychain API - what exactly are you trying to accomplish? – red_menace Dec 14 '19 at 15:43
  • @IconDaemon I am not trying to bypass the local user authentication – TimD Dec 15 '19 at 5:27

You must log in to answer this question.

Browse other questions tagged .