Questions tagged [keychain]

The password management system in macOS

211 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
0 answers
241 views

Why does Keychain ask for the login password twice to show a password?

Whenever I want to view a password in my Keychain, it asks me the login keychain password twice: First like this: Then like this: I'm having trouble understanding why. I am running macOS High ...
user avatar
  • 171
6 votes
1 answer
415 views

Does Apple save a (hashed) version of my device passwords?

As earlier described in this question, I was asked today by my iPad to enter the user account password of my MacBook, and my MacBook later asked me to provide the passcode of my iPad. I'm specifically ...
user avatar
  • 161
6 votes
0 answers
9k views

How to fix login keychain ruined after upgrade to macOS Sierra

update on Oct 19: I am still suffering from this. I tried a lot of ways. For instance, I removed the login KeyChain and created a new one. But it can't hold new items inside except I secured WiFi ...
user avatar
  • 1,587
5 votes
0 answers
93 views

Can I safely delete files from /Library/Keychains

I'm having serious problems with disk space, after some investigation I discovered that ~400GB (not a mistake!) of my 1TB HDD is filled with files in /Library/Keychains. It's about 30k files of approx....
user avatar
  • 151
5 votes
0 answers
2k views

Backup iCloud Keychain

I recently encountered an issue where a very important (and non-resettable) password was deleted from my iCloud Keychain. All of my OSX-based keychains are backed up via Time Machine, but I realized ...
user avatar
  • 652
5 votes
0 answers
4k views

Keychain doesn't remember password for network drives

I have an MBP with Yosemite connected to my home network, and I want to automatically mount three hard drives located on a Windows 8 computer also connected to the network. When I connect using "...
user avatar
4 votes
1 answer
2k views

macOS randomly says Exchange password is needed but actually isn't

I know there have been bugs that cause macOS (or the Mail app) to ask for the Exchange password repeatedly, but this is different from those. The issue I'm having is that I receive a notification for ...
user avatar
  • 258
4 votes
0 answers
2k views

Are there any solid way to view/delete online icloud keychain?

Background I want to empty the items in the online keychain. I've tried many different methods, but none work so far. Whenever I think I deleted an item, the moment I sync with a new device the same ...
user avatar
  • 1,735
4 votes
0 answers
579 views

Who creates /etc/ssl/cert.pem in MacOs

While using curl in verbose mode, I noticed the following line in the output: * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * I googled and found out that etc/ssl/...
user avatar
4 votes
1 answer
166 views

Local Items keychain recovery after system wipe

I recently wiped my Mac and now i need help restoring my old keychain. My website passwords used to be stored in keychain's "Local Items" (no iCloud sync) and I had made a copy of /Library/...
user avatar
4 votes
0 answers
678 views

Keychain does not sync all Keychain items across devices

The Keychain application on my Macbook only syncs the "iCloud Keychain" items with my other Apple devices, which I guess is somewhat the point of "iCloud Keychain", specifically the passwords that are ...
user avatar
4 votes
0 answers
527 views

Is there any way to temporarily accept website certificate that isn't trusted in Safari/High Sierra?

Is there any way to temporarily allow Safari to load a site with an untrusted website certificate in Safari/High Sierra? This was possible in Sierra. I marked several roots Untrusted due to their ...
user avatar
4 votes
0 answers
557 views

Recover old keychain after keychain reset

So, I did a keychain reset on a Mac due to some process taking up a lot of CPU (a keychain cloud daemon). This worked wonders for the cpu, but now the user wants its passwords back and doesn't care ...
user avatar
  • 141
4 votes
0 answers
1k views

headless ssh key password from keychain

On MacOS 10.12 Sierra (or/and OS X 10.11 EI Capitan) how can one use the passwords for ssh keys stored in the keychain headless? If one ssh-es in and left a local session running one can see ssh-...
user avatar
4 votes
0 answers
1k views

With "Keychain First Aid" apparently removed in 10.11.2 how do i get my keychain fixed?

My macbook is presently completely unusable due to an apparently corrupted (?) keychain. As shown in the following question there seems to have been a change in 10.11.2 to have removed the First Aid ...
user avatar
4 votes
0 answers
302 views

Wanted: a way to change many keychain passwords simultaneously

Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
user avatar
4 votes
0 answers
764 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
user avatar
  • 210
4 votes
0 answers
328 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
user avatar
3 votes
0 answers
47 views

Keychain is broken system-wide after tampering with System.keychain

After some frustrations with a half-broken login keychain, I eventually found myself deleting System.keychain and hoping that it would regenerate with defaults. This was a terrible move in hindsight — ...
user avatar
3 votes
0 answers
1k views

How to decrypt WhatsApp iCloud backup

I downloaded my old WhatsApp chat history from iCloud which is encrypted. The SQLite file I am trying to open is ChatStorage.sqlite.enc which asks for a password to open but not sure how to decrypt ...
user avatar
  • 31
3 votes
0 answers
741 views

macOS wants to make changes. Enter an administrator's name and password to allow this

My macbook periodically asks for my password when waking up. It always looks like below and usually has a skype icon (but not always, i think). Is there a way to find what event is causing this using ...
user avatar
3 votes
0 answers
265 views

Excessive trustd errors in console (no CA revocation file found)

I've been experiencing a lot of lag on my system, some of which was addressed with the latest 11.1 update. But looking at my console, I see this error several dozen times a minute: skipping further ...
user avatar
  • 31
3 votes
0 answers
1k views

How do I use ssh agent on MacOS Catalina like OS X El Capitan used to?

I recently upgraded from OS X El Capitan to MacOS Catalina. I am accustomed to keeping my login session open for an entire week, and I was able to use a passphrase-protected ssh key by entering the ...
user avatar
3 votes
0 answers
40 views

Big bug: why does iCloud Keychain remember the wrong expiration month for all of my credit cards?

I've been adding credit cards to my iCloud Keychain for years, and after a few months, I notice that my payments receive errors when I use the autofill from iCloud. The bug: I've realized that ...
user avatar
  • 2,701
3 votes
0 answers
990 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
user avatar
  • 41
3 votes
0 answers
717 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
user avatar
  • 41
3 votes
0 answers
372 views

Chrome command line : Provide custom "Chrome Safe Storage" Keychain password

To decrypt Cookies and passwords, Chrome needs the "Chrome Safe Storage" password stored in the Keychain. I want to be able to run Chrome with a different "Chrome Safe Storage" password. Is there ...
user avatar
3 votes
0 answers
409 views

Local Items keychain: How to get rid of it?

How do I make macOS not use iCloud Keychain (or its sync area, Local Items, while iCloud KC is turned off)? Details: For various reasons, I don’t want to use iCloud Keychain. This seems to have ...
user avatar
3 votes
0 answers
485 views

Search iCloud keychain for all accounts that use a specific password

I used one of those services that scans the internet for compromised passwords, and some passwords I recognized came up, and some that I didn't. In any case, I want to search my keychain for all ...
user avatar
  • 384
3 votes
0 answers
332 views

Accepted Burp Suite Certificate, Still Gives SSL warnings

I'm trying to proxy my traffic through my VM's instance of Burp Suite. I basically configured proxy settings via wifi settings on my iPhone to point to my VM (it's bridged). I can see some HTTP ...
user avatar
  • 31
3 votes
0 answers
603 views

Xcode wants to access DeviceManager in your keychain and tells me to add Spotify to Accessibility

Every now and again (when I plug my iPhone into my Mac with Xcode open), I get the following dialog: The only problem is when I click 'Allow' or 'Allways allow', it pops up with this: Should I trust ...
user avatar
  • 4,420
3 votes
0 answers
475 views

getting an error -25299 attempting to create account and password for proxy

I changed the proxy settings with the following code: sudo networksetup -setwebproxy Wi-Fi IP_ADDRESS PORT on USERNAME PASSWORD It does indeed changes settings, but throws an error saying: error -...
user avatar
  • 2,427
3 votes
0 answers
1k views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
user avatar
  • 10.6k
3 votes
0 answers
1k views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
user avatar
  • 918
3 votes
0 answers
507 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
user avatar
3 votes
0 answers
7k views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
user avatar
  • 7,474
2 votes
0 answers
77 views

How do I allow specific (uncodesigned) programs to access certain keychain items without password?

I use the python keyring module to interact with with macOS Keychain, and I got a prompt to enter my login password to allow access (which I always click "Always Allow") every time I run my ...
user avatar
  • 1,148
2 votes
2 answers
477 views

How to sync passwords between Windows Chrome and iCloud Keychain?

How can I sync passwords between Chrome and iCloud Keychain, i.e. import passwords stored by Chrome on a Windows desktop computer to the iCloud keychain in order to be used on an iPhone?
user avatar
  • 21
2 votes
1 answer
294 views

Can I disable the certificate pinning checks on MacOS to relax proxy inspection detection?

I'm behind a proxy and some websites don't work, in particular ones related to MacOS update, app store etc. I imported the proxy certificate to the MacOS keychain. When I go to https://apps.apple.com ...
user avatar
2 votes
0 answers
192 views

errSecInternalComponent when using codesign from within a daemon

I have my own running daemon application that listens to a network port and executes some different commands based on the coming request. All is working fine except when trying to execute the ...
user avatar
2 votes
1 answer
358 views

How do I restore my macOS keychain from iCloud?

I currently have iCloud Keychain enabled on my devices but am having trouble with my iCloud keychain on my Mac. It seems like a reasonable thing to try would be to delete the iCloud keychain on my Mac ...
user avatar
  • 10.6k
2 votes
0 answers
79 views

Storing SSH passphrases in the login keychain instead of Local Items

If I: Use UseKeychain yes in ~/.ssh/config Use ssh-add -K My SSH key passphrase is stored in my keychain as expected, however, when I check Keychain Access, the stored passphrase is in my iCloud/...
user avatar
  • 121
2 votes
1 answer
150 views

Why does Skype want to use a "Xcode Server Builder Identity" key?

While examining some features of XCode, I briefly enabled the XCode Continuous Integration Server. The following dialog box now pops up: Skype wants to sign using key "Xcode Server Builder ...
user avatar
  • 375
2 votes
0 answers
98 views

iCloud Keychain encryption

I have a question about the strength of the iCloud Keychain encryption key. I know that when I enable iCloud Keychain sync on my device, Apple encrypts my local keychain and stores it on their servers....
user avatar
  • 125
2 votes
1 answer
89 views

How to forget Time Machine password from keychain

When attaching a Time Machine, I am asked if I want to remember the password in the keychain. If I do that, how can I "forget" the password?
user avatar
2 votes
0 answers
1k views

Adding new Account: Failed to authenticate with Google, please try again later

I am trying to add a new google account in internet accounts in Mac. I get this error. I already tried 2 ways I found from google. Open the application "Keychain Access" Look for ...
user avatar
2 votes
0 answers
304 views

Mac - how to authenticate `security find-generic-password` with Touch ID

I need to access the keychain on the command line with security find-generic-password -ga, which would prompt me for username and password for authentication, with or without sudo. I already altered ...
user avatar
  • 1,148
2 votes
0 answers
261 views

How to save all keychain passwords and restore them on a wiped computer?

Once again I ran out of space so I am about to wipe the hard disk of my macbook pro to restart from a clean slate. I have taken a full backup of my home directory to an external hard disk, using rsync ...
user avatar
  • 141
2 votes
0 answers
665 views

"Safari can't establish a secure connection" and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
user avatar
2 votes
0 answers
118 views

How proxy authentication works before first user login?

For the creation of a tool which make uses of system proxy preferences, I am trying to understand their keychain usage: From my current understanding, on MacOS (Catalina) the system preferences for ...
user avatar

1
2 3 4 5