What is a keychain password?
Definition
A keychain password is a login saved in Apple's keychain, the built-in password manager that stores and autofills your passwords, passkeys, card details and Wi-Fi passwords across your Apple devices.
- Category
- Security
- Also called
- iCloud Keychain, Apple keychain, keychain
- Last updated
The word "keychain" comes from Apple. A keychain is the secure store on your iPhone, iPad or Mac where saved logins live. When Safari offers to save a password, it goes in the keychain. Apple describes iCloud Keychain as a way to keep those saved items current on every device you approve, and to fill them in for you: Safari and app usernames, passwords and passkeys, card details and Wi-Fi passwords.
On newer systems (iOS 18, macOS Sequoia), Apple's Passwords app is the main way to see and manage them. Apple also offers a browser extension for Windows.
Keychain password vs. your device password
People mix up two things. Your saved passwords are the entries in the keychain. The password you type to unlock your Mac, or your iPhone passcode, protects the keychain itself. Forget your device passcode and you may lose what it protects.
How it's protected
Apple says iCloud Keychain data is encrypted with 256-bit AES in storage and in transit, and that Apple can't read it. If you turn iCloud Keychain off, the information stays on that device only.
Why it matters
A keychain does what any password manager does: you can use long, different passwords everywhere without remembering them. That blocks credential stuffing, where attackers try a leaked password on other sites. The catch is that everything sits behind one lock, so a weak device passcode or a stolen unlocked phone is the real risk.
How to protect yourself
- 1
Use a long device passcode
The keychain is only as safe as the passcode that opens your device. Use more than a short numeric code where you can.
- 2
Turn on two-factor authentication for your Apple account
Your Apple account controls keychain sync, so lock it down with two-factor authentication.
- 3
Check the Passwords app for weak or reused logins
Apple says the Passwords app alerts you to passwords that might not be secure. Replace the ones it flags, starting with email and banking.
- 4
Keep a recovery route
Know how you would regain access if you lost your device. Write recovery details down and keep them somewhere safe, not in the keychain itself.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
Is iCloud Keychain safe?
Apple says it's encrypted end to end with 256-bit AES and that Apple can't read the contents. Your risk is mostly a weak device passcode.
What happens if I turn off iCloud Keychain?
Apple says passwords, passkeys and card details are then kept on that device only, instead of syncing across your devices.
Is a keychain the same as a password manager?
Apple's keychain does the job of a password manager. Third-party password managers do the same work and are not tied to Apple devices.
Sources
Something wrong or out of date? Tell us and we'll re-check it.