Questions tagged [keychain]

The password management system in macOS

225 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
9 votes
1 answer
318 views

Why does Keychain ask for the login password twice to show a password?

Whenever I want to view a password in my Keychain, it asks me the login keychain password twice: First like this: Then like this: I'm having trouble understanding why. I am running macOS High ...
Scentle5S's user avatar
  • 191
6 votes
0 answers
9k views

How to fix login keychain ruined after upgrade to macOS Sierra

update on Oct 19: I am still suffering from this. I tried a lot of ways. For instance, I removed the login KeyChain and created a new one. But it can't hold new items inside except I secured WiFi ...
AGamePlayer's user avatar
  • 1,837
5 votes
0 answers
289 views

How to list all existing passkeys on macOS?

I'd like to list all accounts with passkeys (Webauthn credentials) stored in my iCloud Keychain. I don't need to export the passkeys (although I'd like to be able to, but this is a different question)...
Emily's user avatar
  • 151
5 votes
1 answer
1k views

Is there a way to add subdomains or different domains for one iCloud Keychain entry?

I have my passwords stored on ICloud via KeyChain the thing is it has different entries for something like: account.mywebsite.com and yet another one for the very same account only on the address: ...
Dan's user avatar
  • 463
5 votes
0 answers
487 views

Can I safely delete files from /Library/Keychains

I'm having serious problems with disk space, after some investigation I discovered that ~400GB (not a mistake!) of my 1TB HDD is filled with files in /Library/Keychains. It's about 30k files of approx....
biesior's user avatar
  • 216
5 votes
0 answers
4k views

Are there any solid way to view/delete online icloud keychain?

Background I want to empty the items in the online keychain. I've tried many different methods, but none work so far. Whenever I think I deleted an item, the moment I sync with a new device the same ...
sgon00's user avatar
  • 2,314
5 votes
0 answers
1k views

Who creates /etc/ssl/cert.pem in MacOs

While using curl in verbose mode, I noticed the following line in the output: * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * I googled and found out that etc/ssl/...
Finlay Weber's user avatar
5 votes
0 answers
2k views

headless ssh key password from keychain

On MacOS 10.12 Sierra (or/and OS X 10.11 EI Capitan) how can one use the passwords for ssh keys stored in the keychain headless? If one ssh-es in and left a local session running one can see ssh-...
user1133275's user avatar
5 votes
0 answers
4k views

Keychain doesn't remember password for network drives

I have an MBP with Yosemite connected to my home network, and I want to automatically mount three hard drives located on a Windows 8 computer also connected to the network. When I connect using "...
Christer Tamm's user avatar
4 votes
2 answers
2k views

How to sync passwords between Windows Chrome and iCloud Keychain?

How can I sync passwords between Chrome and iCloud Keychain, i.e. import passwords stored by Chrome on a Windows desktop computer to the iCloud keychain in order to be used on an iPhone?
CSEE's user avatar
  • 41
4 votes
2 answers
181 views

Where are the new passkeys in the keychain?

I have been playing around with the passkeys and I was expecting to see them in my keychain but no luck? Are they not visible to the user or are they in some menu that I cannot spot.
Umut's user avatar
  • 195
4 votes
0 answers
3k views

How to decrypt WhatsApp iCloud backup

I downloaded my old WhatsApp chat history from iCloud which is encrypted. The SQLite file I am trying to open is ChatStorage.sqlite.enc which asks for a password to open but not sure how to decrypt ...
hackio's user avatar
  • 41
4 votes
0 answers
657 views

Mac - how to authenticate `security find-generic-password` with Touch ID

I need to access the keychain on the command line with security find-generic-password -ga, which would prompt me for username and password for authentication, with or without sudo. I already altered ...
Teddy C's user avatar
  • 1,718
4 votes
0 answers
1k views

How do I use ssh agent on MacOS Catalina like OS X El Capitan used to?

I recently upgraded from OS X El Capitan to MacOS Catalina. I am accustomed to keeping my login session open for an entire week, and I was able to use a passphrase-protected ssh key by entering the ...
dmaestro12's user avatar
4 votes
0 answers
716 views

How to remove all keychain entries an app created from iPhone?

It seems that when an app creates keychain entries, these entries remain in the keychain even after the app is deleted. Afaik this behaviour was changed in ios11.3 beta, but the change was reverted ...
matthias_buehlmann's user avatar
4 votes
0 answers
62 views

Big bug: why does iCloud Keychain remember the wrong expiration month for all of my credit cards?

I've been adding credit cards to my iCloud Keychain for years, and after a few months, I notice that my payments receive errors when I use the autofill from iCloud. The bug: I've realized that ...
Baumr's user avatar
  • 2,816
4 votes
0 answers
868 views

Keychain does not sync all Keychain items across devices

The Keychain application on my Macbook only syncs the "iCloud Keychain" items with my other Apple devices, which I guess is somewhat the point of "iCloud Keychain", specifically the passwords that are ...
Sajib Acharya's user avatar
4 votes
0 answers
549 views

Is there any way to temporarily accept website certificate that isn't trusted in Safari/High Sierra?

Is there any way to temporarily allow Safari to load a site with an untrusted website certificate in Safari/High Sierra? This was possible in Sierra. I marked several roots Untrusted due to their ...
Jonathan Dagle's user avatar
4 votes
0 answers
570 views

Recover old keychain after keychain reset

So, I did a keychain reset on a Mac due to some process taking up a lot of CPU (a keychain cloud daemon). This worked wonders for the cpu, but now the user wants its passwords back and doesn't care ...
chwi's user avatar
  • 141
4 votes
0 answers
2k views

With "Keychain First Aid" apparently removed in 10.11.2 how do i get my keychain fixed?

My macbook is presently completely unusable due to an apparently corrupted (?) keychain. As shown in the following question there seems to have been a change in 10.11.2 to have removed the First Aid ...
WestCoastProjects's user avatar
4 votes
0 answers
591 views

getting an error -25299 attempting to create account and password for proxy

I changed the proxy settings with the following code: sudo networksetup -setwebproxy Wi-Fi IP_ADDRESS PORT on USERNAME PASSWORD It does indeed changes settings, but throws an error saying: error -...
sanjihan's user avatar
  • 2,705
4 votes
0 answers
308 views

Wanted: a way to change many keychain passwords simultaneously

Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
Arlie Stephens's user avatar
4 votes
0 answers
769 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
Juice's user avatar
  • 220
4 votes
0 answers
368 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
Nathaniel Waisbrot's user avatar
3 votes
1 answer
447 views

Unable to delete identity in Keychain

A certificate that we use for Wi-Fi in the office has expired, and it does not renew for some reason. I tried to delete it from the Keychain Access I get the following error: I guess that's the ...
Selcuk S.'s user avatar
3 votes
0 answers
283 views

Is there a way to access Apple's 2FA Verification Code via Terminal?

I would like to script accessing the built-in two factor authentication code that is accessed via System Preferences -> Passwords. One of the apps I use does not prompt for the 2FA code so each ...
CSProfK's user avatar
  • 31
3 votes
0 answers
288 views

How to add application password to Apple Keychain

I use Cisco AnyConnect to connect to a VPN network. For reason beyond my control need to do this quite often and every time I have to provide the password which is long, complex and has to be so. I ...
Bart C's user avatar
  • 386
3 votes
0 answers
81 views

Keychain is broken system-wide after tampering with System.keychain

After some frustrations with a half-broken login keychain, I eventually found myself deleting System.keychain and hoping that it would regenerate with defaults. This was a terrible move in hindsight — ...
Jason1923's user avatar
3 votes
0 answers
1k views

macOS wants to make changes. Enter an administrator's name and password to allow this

My macbook periodically asks for my password when waking up. It always looks like below and usually has a skype icon (but not always, i think). Is there a way to find what event is causing this using ...
erikdstock's user avatar
3 votes
0 answers
177 views

iCloud Keychain encryption

I have a question about the strength of the iCloud Keychain encryption key. I know that when I enable iCloud Keychain sync on my device, Apple encrypts my local keychain and stores it on their servers....
Nick's user avatar
  • 135
3 votes
0 answers
282 views

Excessive trustd errors in console (no CA revocation file found)

I've been experiencing a lot of lag on my system, some of which was addressed with the latest 11.1 update. But looking at my console, I see this error several dozen times a minute: skipping further ...
August's user avatar
  • 31
3 votes
0 answers
855 views

"Safari can't establish a secure connection" and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
John Noble's user avatar
3 votes
0 answers
1k views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
Faun88's user avatar
  • 41
3 votes
0 answers
242 views

Multiple duplicate keychain DBs that don't get cleaned up

Developing with Fastlane, and as a result, I am creating fastlane.keychain keychain. Everytime it runs, it creates a new keychain with same name. OK, that's my fault. However when I tried to delete ...
Slav's user avatar
  • 203
3 votes
0 answers
901 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
Skull's user avatar
  • 41
3 votes
0 answers
503 views

Chrome command line : Provide custom "Chrome Safe Storage" Keychain password

To decrypt Cookies and passwords, Chrome needs the "Chrome Safe Storage" password stored in the Keychain. I want to be able to run Chrome with a different "Chrome Safe Storage" password. Is there ...
Johnny Pralo's user avatar
3 votes
0 answers
315 views

Why won’t ssh-add -K save my passphrase in the keychain?

I have not been able to save my ssh passphrase to the keychain since upgrading to MacOS Sierra. I understand how to use the ssh-add -K flag and the UseKeychain configuration option, and my coworkers ...
Bradd Szonye's user avatar
3 votes
0 answers
431 views

Local Items keychain: How to get rid of it?

How do I make macOS not use iCloud Keychain (or its sync area, Local Items, while iCloud KC is turned off)? Details: For various reasons, I don’t want to use iCloud Keychain. This seems to have ...
Bernd Haug's user avatar
3 votes
0 answers
358 views

Accepted Burp Suite Certificate, Still Gives SSL warnings

I'm trying to proxy my traffic through my VM's instance of Burp Suite. I basically configured proxy settings via wifi settings on my iPhone to point to my VM (it's bridged). I can see some HTTP ...
l3wzl's user avatar
  • 31
3 votes
0 answers
608 views

Xcode wants to access DeviceManager in your keychain and tells me to add Spotify to Accessibility

Every now and again (when I plug my iPhone into my Mac with Xcode open), I get the following dialog: The only problem is when I click 'Allow' or 'Allways allow', it pops up with this: Should I trust ...
iProgram's user avatar
  • 4,630
3 votes
0 answers
1k views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
orome's user avatar
  • 11.8k
3 votes
0 answers
1k views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
cnst's user avatar
  • 978
3 votes
0 answers
538 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
makerofthings7's user avatar
3 votes
0 answers
7k views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
dwightk's user avatar
  • 7,619
3 votes
2 answers
4k views

Touch ID Canceled by another authentication

I've had this issue over multiple iterations of OS. This began for me in High Sierra, followed into Mojave, and now into Catalina. I finally figured I'd deal with it. I've tried everything I've found ...
Duah's user avatar
  • 31
2 votes
0 answers
49 views

Programmatically retrieve Microsoft Office 365 account

I'm trying to programmatically retrieve the Office 365 account in use by users on a Mac fleet. I discovered this is apparently stored in the keychain, either in the msoCredentialSchemeADAL internet ...
Maxxer's user avatar
  • 156
2 votes
0 answers
64 views

Mountain Lion Server Certificates Expiry Renewal

I have some certificates expiring within a month. They don't show up in the Server App, but I'm getting emails that they are expiring all the same. They show up in Keychain Access. com.apple....
Rich_F's user avatar
  • 253
2 votes
2 answers
1k views

How to edit/delete/wipe iPhone (local) keychain items to stop Apps from identifying devices

So it has not been news that some IOS developers use keychain items to track the uniqueness of devices through App reinstallation. Amazon is a huge one among them. What made my life particularly hard ...
hzh's user avatar
  • 207
2 votes
0 answers
385 views

Unlock Keychain items using Yubikey

I have setup my Yubikey as a smart card so I can login with the key and its PIN code. After logging in with the Yubikey, the login keychain is unlocked. However, opening a keychain item en trying to ...
Brecht Machiels's user avatar
2 votes
1 answer
563 views

iOS distribution certificates expiring for two apps from same team: Do I need to take separate actions?

I have two apps both associated with the same development team, and I've gotten notifications for both of them that Your iOS Distribution Certificate will no longer be valid in 30 days. I got these ...
gkeenley's user avatar
  • 471

1
2 3 4 5