All articles tagged with #icloud keychain
iOS 18, macOS 15, and iPadOS 18 will feature a dedicated Passwords app, making it easier to manage and sync passwords across Apple devices and Windows. The app, powered by iCloud Keychain, will support importing passwords from services like 1Password and LastPass, and will include features like auto-fill and authentication codes. Apple will unveil these updates at WWDC 2024.
Apple users who are fully invested in the Apple ecosystem may find it more convenient to switch from Google Authenticator to iCloud Keychain for managing one-time passwords (OTPs) for two-factor authentication. With iCloud Keychain, users can easily copy and paste or AutoFill OTPs across all Apple devices, eliminating the need to constantly switch to their iPhone. Additionally, iCloud Keychain offers seamless migration of OTPs to new devices, making it a hassle-free option for Apple users. To import Google Authenticator codes into iCloud Keychain, users need to follow a few steps outlined in the article.
Apple is adding support for using iCloud Keychain on Chrome browsers for Mac users with the introduction of the iCloud Passwords Chrome extension. This extension allows users to autofill passwords from their iCloud Keychain on Chrome-based browsers, including Arc, Sidekick, and Opera. The extension also supports two-factor authentication and allows users to set up new verification codes using QR codes. With this update, Apple aims to make iCloud Keychain a more appealing password manager option, especially as the password-less passkeys future approaches.
Apple is rolling out passkeys, which are cryptographically generated keys unique to the account and device they are generated on, to replace passwords. The passkeys will be automatically assigned to Apple IDs and stored on iCloud Keychain accounts, synced across all devices, and used for logging into iCloud and any account linked to the Apple ID. The passkeys will be available on devices running iOS 15, iPadOS 15, or macOS Monterey. Windows and Android users can authenticate the passkey via a QR scan from an iPhone.
iOS 17 introduces a new feature called "Family Passwords" that allows users to share passwords and passkeys with a group of trusted contacts through iCloud Keychain. The feature is end-to-end encrypted and can be accessed through the Passwords section in the Settings app. Users can add people to their shared password group and set up multiple groups. Shared passwords can be edited, added, and deleted, but deleted passwords will be removed from both the shared list and the user's own passwords. The feature is part of Apple's expanding Family Sharing features.
Apple's iCloud Keychain is a tool that stores app and website passwords on your iPhone and scans known password leaks to warn you if any of your saved passwords have been compromised. Third-party password managers can fill the gap that iCloud Keychain can't, with seamless sync, cross-platform availability, and encryption to protect your data. By using these tools, you can simplify the process of managing and securing your passwords across all your devices and enhance your online security.
A new malware called Atomic macOS Stealer (AMOS) is being sold as a service to malicious parties for $1,000/month. If installed, AMOS can compromise a long list of items including iCloud Keychain passwords, the macOS system password, cookies, passwords, and credit card details from various browsers, and crypto wallets. The malware compresses the data into a ZIP file and sends it back to the malicious party through a C&C server URL. It is important to stay diligent and follow best practices such as downloading and installing software only from the official Apple App Store, using strong passwords and multi-factor authentication, and keeping devices and applications updated.
A new malware named MacStealer is targeting Mac users, stealing their credentials stored in the iCloud KeyChain and web browsers, cryptocurrency wallets, and potentially sensitive files. The malware is being distributed as a malware-as-a-service (MaaS), where the developer sells premade builds for $100, allowing purchasers to spread the malware in their campaigns. MacStealer can run on macOS Catalina (10.15) and up to the latest version of Apple's OS, Ventura (13.2). The threat actor uses the lack of a builder and panel to justify the low price of $100 for the malware but promises that more advanced features will arrive soon.