<story><title>Apple passwords deserve an app</title><url>https://cabel.com/2023/03/27/apple-passwords-deserve-an-app/</url></story><parent_chain><item><author>klodolph</author><text>&amp;gt; Yeah, this is super fucking weird. You&amp;#x27;d think this would be connected in some fashion to &amp;quot;keychain&amp;quot;, but nope.&lt;p&gt;Other browsers used to be able to use it. I do think it’s a really thorny issue—“allow this application to access all saved passwords?” is a pretty damn scary permission to include. Up there with the “allow this application to control your computer” permission that is used for accessibility apps (which apps can abuse to read passwords, if I understand correctly).&lt;p&gt;Apple’s tradition. Make the platform more secure, add an exception for first-party apps, and let the other browsers fuck off.</text></item><item><author>yamtaddle</author><text>&amp;gt; 1. The experience on Windows is terrible. They can claim it&amp;#x27;s cross-platform but it&amp;#x27;s truly a sub-par product.&lt;p&gt;Like a lot of other Apple stuff, I&amp;#x27;m only able to use it because I don&amp;#x27;t use anything non-Apple for anything &amp;quot;serious&amp;quot; that involves a GUI. Windows is for gaming, Linux is my file storage and docker-service-running server that I only interact with over SSH and Web. Ditto Notes, all their Office-type programs, et c. I&amp;#x27;d probably be on a lot more Google shit if I needed more cross-platform access to that stuff.&lt;p&gt;&amp;gt; 2. On Mac it&amp;#x27;s tied specifically to Safari. I use Safari a lot but if I&amp;#x27;m in a different browser then my passwords are unavailable.&lt;p&gt;Yeah, this is super fucking weird. You&amp;#x27;d think this would be connected in some fashion to &amp;quot;keychain&amp;quot;, but nope.&lt;p&gt;&amp;gt; 3. The GUI is buried in System Settings. Heaven forbid you need search it&amp;#x27;s only a simple 37 clicks away!&lt;p&gt;IDGAF about clicks because I search my way to everything in Apple&amp;#x27;s settings—what does bother me is that they&amp;#x27;ve made search worse in the last couple versions of iOS, and that if I type &amp;quot;pass&amp;quot; in search, &amp;quot;Passwords&amp;quot; &lt;i&gt;isn&amp;#x27;t even visible on the list&lt;/i&gt; yet. I can get all the way to &amp;quot;password&amp;quot; and it&amp;#x27;s still the &lt;i&gt;fourth&lt;/i&gt; entry. The fucking &lt;i&gt;name of the screen&lt;/i&gt; is &amp;quot;passwords&amp;quot;! I shouldn&amp;#x27;t have to get farther than &amp;quot;pas&amp;quot; for it to be the first entry on the list, &amp;quot;pass&amp;quot; in the worst-case! Even fully typing &amp;quot;passwords&amp;quot; still leaves it as the &lt;i&gt;second&lt;/i&gt; entry (of three) on my device. WTF.</text></item><item><author>hnrodey</author><text>I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass.&lt;p&gt;In short.&lt;p&gt;1. The experience on Windows is terrible. They can claim it&amp;#x27;s cross-platform but it&amp;#x27;s truly a sub-par product.&lt;p&gt;2. On Mac it&amp;#x27;s tied specifically to Safari. I use Safari a lot but if I&amp;#x27;m in a different browser then my passwords are unavailable.&lt;p&gt;3. The GUI is buried in System Settings. Heaven forbid you need search it&amp;#x27;s only a simple 37 clicks away!&lt;p&gt;I think those were my big complaints. If you are 100% Mac then it&amp;#x27;s a good product. Going outside of the walled Apple garden leaves a lot to be desired.</text></item></parent_chain><comment><author>varenc</author><text>Safari Passwords and 3rd party apps can and do use the Apple Keychain on macOS&amp;#x2F;iOS to store sensitive data. Though 3rd parties can&amp;#x27;t integrate with Safari&amp;#x27;s password manager.&lt;p&gt;If you use Chrome Sync with passwords on macOS, Chrome actually stores the decryption key in the macOS keychain. Just open Keychain.app (&amp;#x2F;Applications&amp;#x2F;Utilities&amp;#x2F;Keychain Access.app) and search for &amp;quot;Chrome Safe Storage&amp;quot; to find it. That&amp;#x27;s the decryption key for the actual encrypted password&amp;#x2F;sync data stored elsewhere. (So not possible to access Chrome passwords from the Keychain directly)&lt;p&gt;Safari Passwords (Apple&amp;#x27;s password manager) also stores passwords in the Keychain as individual entries and you can access them via Keychain.app. Unfortunately, since they’re part of the iCloud Keychain not the local login Keychain, they appear to be inaccessible with the `security` CLI tool which fails in an obtuse way.</text></comment>
<story><title>Apple passwords deserve an app</title><url>https://cabel.com/2023/03/27/apple-passwords-deserve-an-app/</url></story><parent_chain><item><author>klodolph</author><text>&amp;gt; Yeah, this is super fucking weird. You&amp;#x27;d think this would be connected in some fashion to &amp;quot;keychain&amp;quot;, but nope.&lt;p&gt;Other browsers used to be able to use it. I do think it’s a really thorny issue—“allow this application to access all saved passwords?” is a pretty damn scary permission to include. Up there with the “allow this application to control your computer” permission that is used for accessibility apps (which apps can abuse to read passwords, if I understand correctly).&lt;p&gt;Apple’s tradition. Make the platform more secure, add an exception for first-party apps, and let the other browsers fuck off.</text></item><item><author>yamtaddle</author><text>&amp;gt; 1. The experience on Windows is terrible. They can claim it&amp;#x27;s cross-platform but it&amp;#x27;s truly a sub-par product.&lt;p&gt;Like a lot of other Apple stuff, I&amp;#x27;m only able to use it because I don&amp;#x27;t use anything non-Apple for anything &amp;quot;serious&amp;quot; that involves a GUI. Windows is for gaming, Linux is my file storage and docker-service-running server that I only interact with over SSH and Web. Ditto Notes, all their Office-type programs, et c. I&amp;#x27;d probably be on a lot more Google shit if I needed more cross-platform access to that stuff.&lt;p&gt;&amp;gt; 2. On Mac it&amp;#x27;s tied specifically to Safari. I use Safari a lot but if I&amp;#x27;m in a different browser then my passwords are unavailable.&lt;p&gt;Yeah, this is super fucking weird. You&amp;#x27;d think this would be connected in some fashion to &amp;quot;keychain&amp;quot;, but nope.&lt;p&gt;&amp;gt; 3. The GUI is buried in System Settings. Heaven forbid you need search it&amp;#x27;s only a simple 37 clicks away!&lt;p&gt;IDGAF about clicks because I search my way to everything in Apple&amp;#x27;s settings—what does bother me is that they&amp;#x27;ve made search worse in the last couple versions of iOS, and that if I type &amp;quot;pass&amp;quot; in search, &amp;quot;Passwords&amp;quot; &lt;i&gt;isn&amp;#x27;t even visible on the list&lt;/i&gt; yet. I can get all the way to &amp;quot;password&amp;quot; and it&amp;#x27;s still the &lt;i&gt;fourth&lt;/i&gt; entry. The fucking &lt;i&gt;name of the screen&lt;/i&gt; is &amp;quot;passwords&amp;quot;! I shouldn&amp;#x27;t have to get farther than &amp;quot;pas&amp;quot; for it to be the first entry on the list, &amp;quot;pass&amp;quot; in the worst-case! Even fully typing &amp;quot;passwords&amp;quot; still leaves it as the &lt;i&gt;second&lt;/i&gt; entry (of three) on my device. WTF.</text></item><item><author>hnrodey</author><text>I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass.&lt;p&gt;In short.&lt;p&gt;1. The experience on Windows is terrible. They can claim it&amp;#x27;s cross-platform but it&amp;#x27;s truly a sub-par product.&lt;p&gt;2. On Mac it&amp;#x27;s tied specifically to Safari. I use Safari a lot but if I&amp;#x27;m in a different browser then my passwords are unavailable.&lt;p&gt;3. The GUI is buried in System Settings. Heaven forbid you need search it&amp;#x27;s only a simple 37 clicks away!&lt;p&gt;I think those were my big complaints. If you are 100% Mac then it&amp;#x27;s a good product. Going outside of the walled Apple garden leaves a lot to be desired.</text></item></parent_chain><comment><author>paulddraper</author><text>Obviously the browser doesn&amp;#x27;t need to have unfettered access.&lt;p&gt;It just needs to tell the password &amp;quot;hey there&amp;#x27;s a password on wellsfargo.com&amp;quot; and then the password manager asks the user if they want to use the password. And maybe give access to all passwords.&lt;p&gt;IDK, what does safari do?</text></comment>