Questions tagged [keychain]
The password management system in macOS
211
questions with no upvoted or accepted answers
7
votes
0
answers
241
views
Why does Keychain ask for the login password twice to show a password?
Whenever I want to view a password in my Keychain, it asks me the login keychain password twice:
First like this:
Then like this:
I'm having trouble understanding why. I am running macOS High ...
- 171
6
votes
1
answer
415
views
Does Apple save a (hashed) version of my device passwords?
As earlier described in this question, I was asked today by my iPad to enter the user account password of my MacBook, and my MacBook later asked me to provide the passcode of my iPad. I'm specifically ...
- 161
6
votes
0
answers
9k
views
How to fix login keychain ruined after upgrade to macOS Sierra
update on Oct 19:
I am still suffering from this. I tried a lot of ways. For instance, I removed the login KeyChain and created a new one. But it can't hold new items inside except I secured WiFi ...
- 1,587
5
votes
0
answers
93
views
Can I safely delete files from /Library/Keychains
I'm having serious problems with disk space, after some investigation I discovered that ~400GB (not a mistake!) of my 1TB HDD is filled with files in /Library/Keychains.
It's about 30k files of approx....
- 151
5
votes
0
answers
2k
views
Backup iCloud Keychain
I recently encountered an issue where a very important (and non-resettable) password was deleted from my iCloud Keychain. All of my OSX-based keychains are backed up via Time Machine, but I realized ...
- 652
5
votes
0
answers
4k
views
Keychain doesn't remember password for network drives
I have an MBP with Yosemite connected to my home network, and I want to automatically mount three hard drives located on a Windows 8 computer also connected to the network.
When I connect using "...
- 111
4
votes
1
answer
2k
views
macOS randomly says Exchange password is needed but actually isn't
I know there have been bugs that cause macOS (or the Mail app) to ask for the Exchange password repeatedly, but this is different from those. The issue I'm having is that I receive a notification for ...
- 258
4
votes
0
answers
2k
views
Are there any solid way to view/delete online icloud keychain?
Background
I want to empty the items in the online keychain. I've tried many different methods, but none work so far. Whenever I think I deleted an item, the moment I sync with a new device the same ...
- 1,735
4
votes
0
answers
579
views
Who creates /etc/ssl/cert.pem in MacOs
While using curl in verbose mode, I noticed the following line in the output:
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
*
I googled and found out that etc/ssl/...
- 141
4
votes
1
answer
166
views
Local Items keychain recovery after system wipe
I recently wiped my Mac and now i need help restoring my old keychain. My website passwords used to be stored in keychain's "Local Items" (no iCloud sync) and I had made a copy of /Library/...
- 41
4
votes
0
answers
678
views
Keychain does not sync all Keychain items across devices
The Keychain application on my Macbook only syncs the "iCloud Keychain" items with my other Apple devices, which I guess is somewhat the point of "iCloud Keychain", specifically the passwords that are ...
- 141
4
votes
0
answers
527
views
Is there any way to temporarily accept website certificate that isn't trusted in Safari/High Sierra?
Is there any way to temporarily allow Safari to load a site with an untrusted website certificate in Safari/High Sierra?
This was possible in Sierra. I marked several roots Untrusted due to their ...
- 178
4
votes
0
answers
557
views
Recover old keychain after keychain reset
So, I did a keychain reset on a Mac due to some process taking up a lot of CPU (a keychain cloud daemon). This worked wonders for the cpu, but now the user wants its passwords back and doesn't care ...
- 141
4
votes
0
answers
1k
views
headless ssh key password from keychain
On MacOS 10.12 Sierra (or/and OS X 10.11 EI Capitan) how can one use the passwords for ssh keys stored in the keychain headless?
If one ssh-es in and left a local session running one can see ssh-...
- 310
4
votes
0
answers
1k
views
With "Keychain First Aid" apparently removed in 10.11.2 how do i get my keychain fixed?
My macbook is presently completely unusable due to an apparently corrupted (?) keychain. As shown in the following question there seems to have been a change in 10.11.2 to have removed the First Aid
...
- 4,842
4
votes
0
answers
302
views
Wanted: a way to change many keychain passwords simultaneously
Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
- 945
4
votes
0
answers
764
views
How to disable keychain completely in Mavericks?
Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
- 210
4
votes
0
answers
328
views
How can I revoke an applications access to keychain passwords from the command-line?
Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer)
I'd like to be able to revoke from ...
3
votes
0
answers
47
views
Keychain is broken system-wide after tampering with System.keychain
After some frustrations with a half-broken login keychain, I eventually found myself deleting System.keychain and hoping that it would regenerate with defaults. This was a terrible move in hindsight — ...
- 63
3
votes
0
answers
1k
views
How to decrypt WhatsApp iCloud backup
I downloaded my old WhatsApp chat history from iCloud which is encrypted.
The SQLite file I am trying to open is ChatStorage.sqlite.enc which asks for a password to open but not sure how to decrypt ...
- 31
3
votes
0
answers
741
views
macOS wants to make changes. Enter an administrator's name and password to allow this
My macbook periodically asks for my password when waking up. It always looks like below and usually has a skype icon (but not always, i think). Is there a way to find what event is causing this using ...
- 193
3
votes
0
answers
265
views
Excessive trustd errors in console (no CA revocation file found)
I've been experiencing a lot of lag on my system, some of which was addressed with the latest 11.1 update. But looking at my console, I see this error several dozen times a minute:
skipping further ...
- 31
3
votes
0
answers
1k
views
How do I use ssh agent on MacOS Catalina like OS X El Capitan used to?
I recently upgraded from OS X El Capitan to MacOS Catalina. I am accustomed to keeping my login session open for an entire week, and I was able to use a passphrase-protected ssh key by entering the ...
- 165
3
votes
0
answers
40
views
Big bug: why does iCloud Keychain remember the wrong expiration month for all of my credit cards?
I've been adding credit cards to my iCloud Keychain for years, and after a few months, I notice that my payments receive errors when I use the autofill from iCloud.
The bug:
I've realized that ...
- 2,701
3
votes
0
answers
990
views
Trust SSL certificate via terminal in MacOS
I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format.
As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
- 41
3
votes
0
answers
717
views
Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command
I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command.
But getting error :security: SecKeychainItemExport: User ...
- 41
3
votes
0
answers
372
views
Chrome command line : Provide custom "Chrome Safe Storage" Keychain password
To decrypt Cookies and passwords, Chrome needs the "Chrome Safe Storage" password stored in the Keychain.
I want to be able to run Chrome with a different "Chrome Safe Storage" password. Is there ...
- 43
3
votes
0
answers
409
views
Local Items keychain: How to get rid of it?
How do I make macOS not use iCloud Keychain (or its sync area, Local Items, while iCloud KC is turned off)?
Details:
For various reasons, I don’t want to use iCloud Keychain. This seems to have ...
- 131
3
votes
0
answers
485
views
Search iCloud keychain for all accounts that use a specific password
I used one of those services that scans the internet for compromised passwords, and some passwords I recognized came up, and some that I didn't. In any case, I want to search my keychain for all ...
- 384
3
votes
0
answers
332
views
Accepted Burp Suite Certificate, Still Gives SSL warnings
I'm trying to proxy my traffic through my VM's instance of Burp Suite. I basically configured proxy settings via wifi settings on my iPhone to point to my VM (it's bridged). I can see some HTTP ...
- 31
3
votes
0
answers
603
views
Xcode wants to access DeviceManager in your keychain and tells me to add Spotify to Accessibility
Every now and again (when I plug my iPhone into my Mac with Xcode open), I get the following dialog:
The only problem is when I click 'Allow' or 'Allways allow', it pops up with this:
Should I trust ...
- 4,420
3
votes
0
answers
475
views
getting an error -25299 attempting to create account and password for proxy
I changed the proxy settings with the following code:
sudo networksetup -setwebproxy Wi-Fi IP_ADDRESS PORT on USERNAME PASSWORD
It does indeed changes settings, but throws an error saying:
error -...
- 2,427
3
votes
0
answers
1k
views
What is Migration Assistant doing when it transfers Keychains?
When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
- 10.6k
3
votes
0
answers
1k
views
Non-extractable private key in Keychain Access.app
The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported.
How is this ...
- 918
3
votes
0
answers
507
views
How can I add an SMIME cert and configure iOS mail to use it?
In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email.
Since I have over 10,000 BYOD devices to update, what is the most effective way to
Deploy an ...
- 4,223
3
votes
0
answers
7k
views
Keychain Access not revealing passwords
I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue.
If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
- 7,474
2
votes
0
answers
77
views
How do I allow specific (uncodesigned) programs to access certain keychain items without password?
I use the python keyring module to interact with with macOS Keychain, and I got a prompt to enter my login password to allow access (which I always click "Always Allow") every time I run my ...
- 1,148
2
votes
2
answers
477
views
How to sync passwords between Windows Chrome and iCloud Keychain?
How can I sync passwords between Chrome and iCloud Keychain, i.e. import passwords stored by Chrome on a Windows desktop computer to the iCloud keychain in order to be used on an iPhone?
- 21
2
votes
1
answer
294
views
Can I disable the certificate pinning checks on MacOS to relax proxy inspection detection?
I'm behind a proxy and some websites don't work, in particular ones related to MacOS update, app store etc. I imported the proxy certificate to the MacOS keychain.
When I go to https://apps.apple.com ...
- 21
2
votes
0
answers
192
views
errSecInternalComponent when using codesign from within a daemon
I have my own running daemon application that listens to a network port and executes some different commands based on the coming request. All is working fine except when trying to execute the ...
- 121
2
votes
1
answer
358
views
How do I restore my macOS keychain from iCloud?
I currently have iCloud Keychain enabled on my devices but am having trouble with my iCloud keychain on my Mac. It seems like a reasonable thing to try would be to delete the iCloud keychain on my Mac ...
- 10.6k
2
votes
0
answers
79
views
Storing SSH passphrases in the login keychain instead of Local Items
If I:
Use UseKeychain yes in ~/.ssh/config
Use ssh-add -K
My SSH key passphrase is stored in my keychain as expected, however, when I check Keychain Access, the stored passphrase is in my iCloud/...
- 121
2
votes
1
answer
150
views
Why does Skype want to use a "Xcode Server Builder Identity" key?
While examining some features of XCode, I briefly enabled the XCode Continuous Integration Server. The following dialog box now pops up:
Skype wants to sign using key "Xcode Server Builder ...
- 375
2
votes
0
answers
98
views
iCloud Keychain encryption
I have a question about the strength of the iCloud Keychain encryption key.
I know that when I enable iCloud Keychain sync on my device, Apple encrypts my local keychain and stores it on their servers....
- 125
2
votes
1
answer
89
views
How to forget Time Machine password from keychain
When attaching a Time Machine, I am asked if I want to remember the password in the keychain. If I do that, how can I "forget" the password?
- 269
2
votes
0
answers
1k
views
Adding new Account: Failed to authenticate with Google, please try again later
I am trying to add a new google account in internet accounts in Mac. I get this error.
I already tried 2 ways I found from google.
Open the application "Keychain Access"
Look for ...
- 21
2
votes
0
answers
304
views
Mac - how to authenticate `security find-generic-password` with Touch ID
I need to access the keychain on the command line with security find-generic-password -ga, which would prompt me for username and password for authentication, with or without sudo.
I already altered ...
- 1,148
2
votes
0
answers
261
views
How to save all keychain passwords and restore them on a wiped computer?
Once again I ran out of space so I am about to wipe the hard disk of my macbook pro to restart from a clean slate. I have taken a full backup of my home directory to an external hard disk, using rsync ...
- 141
2
votes
0
answers
665
views
"Safari can't establish a secure connection" and OmniFocus sync is broken
Symptoms
macOS 10.14.6, Safari 13.1, all updates applied.
Safari refuses to connect to some websites.
Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
- 358
2
votes
0
answers
118
views
How proxy authentication works before first user login?
For the creation of a tool which make uses of system proxy preferences, I am trying to understand their keychain usage:
From my current understanding, on MacOS (Catalina) the system preferences for ...
- 200