Mac Tips & Tricks: Password management with iCloud Keychain

Mac Tips & Tricks

Password management with iCloud Keychain - stop reusing the same password everywhere.

If the same password guards your email, your bank and that shopping site you used once in 2019, your Mac already has a better way. The Passwords app - built into macOS and signed in with iCloud Keychain - stores every login, flags the weak and reused ones, and fills them in for you without you typing a thing. It also handles passkeys and two-factor codes, so the separate authenticator app you've been juggling can probably go.

1. Meet the Passwords app.

Open the Passwords app (or System Settings > Passwords) and you'll find every login you've ever saved, synced automatically across every Mac, iPhone and iPad signed into the same iCloud account. It doesn't just store passwords - it grades them, flagging anything weak, reused, or caught up in a data breach you'd never have heard about otherwise.

Try this

→  Open Passwords from Launchpad, or System Settings > Passwords if you'd rather stay in one place.

→  Check Security Recommendations for any password marked weak or reused - it'll suggest a strong replacement.

→  Look under Compromised Passwords for anything caught up in a known data leak, and change those first.

→  Sign-ins made here appear on your iPhone within seconds - no separate setup needed.

2. Passkeys - the login you can't leak.

A passkey replaces your password entirely with a proof of identity tied to your device and confirmed by Face ID or Touch ID. There's nothing to type and nothing for a scam site to steal, because the passkey never leaves your device in the first place - only a signed confirmation does.

Try this

→  Look for 'Sign in with a passkey' or 'Create a passkey' on any site that offers it - Apple, Google and most banks do.

→  Confirm with Touch ID or Face ID instead of typing anything - that's the whole sign-in.

→  Passkeys sync through iCloud Keychain automatically, so they're ready on your other Apple devices too.

→  Signing in on a Windows PC or Android phone? Scan the QR code it offers and approve it on your iPhone.

3. Autofill and verification codes, without leaving the box.

Turn on AutoFill in Safari and your saved logins appear the moment you tap a sign-in field - on your Mac, and in Chrome or Edge too, once you install Apple's iCloud Passwords extension. The same app can generate and fill six-digit verification codes, so the separate authenticator app most people install is often no longer necessary.

Try this

→  Check AutoFill is on: Safari > Settings > AutoFill, then tick 'Usernames and Passwords'.

→  Add a code generator to any saved login by opening it in Passwords and choosing Set Up Verification Code.

→  Codes fill in automatically at sign-in - no swapping to a separate app or copying digits by hand.

→  Using Chrome or Edge? Install the iCloud Passwords browser extension and the same vault works there too.

4. Sharing logins with family, safely.

Streaming services, the family broadband router, a shared spreadsheet login - some passwords genuinely need more than one person to know them. A shared group in the Passwords app keeps everyone on the same, current password without anyone texting it to the family group chat.

Try this

→  In Passwords, go to the sidebar and choose New Shared Group, then add family members by email or phone number.

→  Move any login into the group and everyone in it gets it instantly, kept in sync as it changes.

→  Update the password once and every member's copy updates itself - no more 'wait, which version is current'.

→  Removing someone from the group stops their access, but change the password too if it was ever typed in front of them.

Things to remember

•  The Passwords app is free, built in, and already signed in with your iCloud account - there's nothing to install.

•  Weak, reused and compromised passwords are flagged for you - it's worth a look even if you think you're careful.

•  Passkeys are the strongest option where a site supports them: no password to type, guess or leak.

•  Shared groups beat texting a password to the family chat - update once, everyone's copy stays current.

•  If you're reading this through your employer's TechBenefits scheme, the same iCloud Keychain covers every Apple device on your account, work or personal.

Bought your Mac from Farpoint? You'll get a Mac tips email like this one each week. Got a question about your Mac, hit reply - we've been the Mac people in Bath for over 25 years.

Farpoint Developments Ltd. · farpoint.co.uk · 01225 460 678

Back to blog

Leave a comment

Please note, comments need to be approved before they are published.