Ask Different is a question and answer site for power users of Apple hardware and software. It only takes a minute to sign up.
Sign up to join this community
I am a bit confused, I have "login" and "iCloud" as default Keychains, are they both synced to Apple's cloud? Is the "login" Keychain synced to the cloud the same way the "iCloud" is?
I don't want to lose access to the passwords in the "login" Keychain. If it's not synced I am looking for a way to have all passwords transferred to the "iCloud" Keychain
There are two types of macOS keychain:
Apple intends to phase the less secure file-based keychains out, but this will probably take several years as 3rd party application developers will need to update their software to use the newer Data Protection keychains. Data Protection keychains support passkeys, biometric authentication, and the Secure Enclave; file-based keychains do not.
The "login" keychain is used for secrets related to your specific machine. Most of these aren't needed when you switch to a new Mac, but some items, such as passwords for encrypted Time Machine backups, could be lost when you switch. I recommend copying the login keychain from ~/Library/Keychains/login.keychain-db when transferring to a new Mac, along with other essential tasks such as signing out of iCloud, deauthorising iTunes, and so on.
As @Gilby pointed out, if you migrate using a Time Machine backup the login keychain will automatically be copied over to the new Mac so copying it manually may not be necessary.
Some items, such as Secure Notes, can be copied from the login keychain to the iCloud keychain, and I would recommend doing this if you use the iCloud keychain. You can copy them in bulk but you will have to authenticate for each item.
iOS and iPadOS devices only have one keychain, the iCloud keychain (if used).
Sources:
The login keychain is stored on the device, whereas the iCloud keychain is stored on the Apple server.
Source: Apple Community Discussion "Keychain versus iCloud Keychain"
