How to master your passwords using iCloud Keychain

If you’re not using iCloud Keychain on your iPhone, iPad, or Mac, you should definitely turn it on. It’s basically a full-fledged password manager built right into iOS and macOS that stores all of your sensitive logins with end-to-end encryption and biometric authentication that syncs across all of your Apple devices. And it’s 100 percent free.

But even if you’re already using it to store logins to apps, Apple Pay info, and Wi-Fi, internet, and other online passwords, you might not be getting all you can out of it. Here’s how to get the most out of Apple’s password manager—and why you don’t want to rely on it for all of your data storage needs.

How to set up iCloud Keychain

If you have an iPhone or a Mac, you have an iCloud account, and if you have an iCloud account, you have iCloud Keychain. If you want to check to see if it’s turned on, you’ll need to you open Settings on an iPhone or iPad (System Preferences on a Mac), then tap your name (Apple ID on a Mac), then iCloud. Scroll down to Keychain and make sure the toggle is green (check the box on a Mac).

That’s basically it. You may need to type in your password or passcode, and you’ll want to check your other Apple devices to make sure it’s turned on for each of them, too, but otherwise, there’s nothing else to set up. Note: If you don’t see the iCloud Keychain option, your device might be too old. iCloud Keychain is supported on devices that use iOS 7.0.3 or later, or OS X Mavericks 10.9 and later.

Autofill passwords with iCloud Keychain

The main reason for iCloud Keychain’s existence is the ability to quickly log into a website without typing or even remembering your username and password. On your iPhone or iPad, head over to Settings, then Passwords and AutoFill Passwords. Flip the toggle, select iCloud Keychain, and you’ll get an Apple ID prompt whenever you reach a supported password field in Safari or some other app rather the site’s individual password.

You can also use iCloud Keychain AutoFill on your Mac, but only within the Safari browser. To turn it on, head over to Preferences in Safari, then the AutoFill tab. There are a few options, including information from contacts, user names and passwords, and credit cards. Turn on the ones you want and you’ll be all set.

Use Face ID or Touch ID

iCloud Keychain works best when you leverage Apple’s biometric system to make filling passwords quick and easy. If you haven’t turned it on, head over to the Face ID & Passcode tab on your iPhone or iPad (Touch ID & Passcode on the new iPad Air), or the Touch ID tab on your Mac to turn on the ability to use your devices biometric authentication system for auto-filling passwords. Then you won’t need to type your Apple ID password or passcode whenever you need to fill in a field.

Add logins manually

iCloud Keychain does a great job picking up logins and passwords as you log into sites and accounts, but you don’t have to wait for a website to prompt you to enter new credentials. Just like a third-party password manager, you can manually enter logins to save inside the Passwords tab in Settings on your iPhone or iPad. Just press the “+” symbol and you’ll be able to enter your own user name and password for any website.

On a Mac, you can manually create a password profile in Safari. Go to Safari’s Preferences, and then select Passwords. Click the Add button, and you can then create a profile with the website’s URL, your user name, and your password. 

Check for hacked passwords

With new hacks and data breaches popping up seemingly every day, it can be hard to keep up with them all. Thankfully you can use your iCloud Keychain to keep tabs on which of your password may be compromised. On the iPhone or iPad, head back to the Passwords tab in Settings and tap the Security Recommendations tab. You can opt to Detect Compromised Passwords, which will tell you if your passwords have appeared in known data leaks, are reused on other sites, or if you’re using a password that’s easy to guess.

On a Mac in Safari, go to Safari’s Preferences, and click on Passwords. In the list that appears, a yellow alert icon (it’s a triangle with a “!” in the center) means that there are security recommendations available. Click the icon to see the recommendation.

Don’t be alarmed if there are hundreds of recommendations, it’s possible that many of them are old passwords or ones that are no longer used. But if you see any from sites or accounts that you still use or passwords that have been recycled, you should change them. You’ll find a link to the site right in the settings pane, so changing it is a snap.

Create a secure note

In addition to the iCloud Keychain on iOS devices, there’s also a tandem Mac app called Keychain Access. It’s way more powerful than iCloud Keychain, letting you see system keys and roots and export some keychain items for use with other apps.

You can also use the app to create secure notes for things you need to remember independently of stored passwords. Similar to a password for a locked note in the Notes app, you can write notes in the Keychain Access app that can only be accessed when you enter your Mac password.

Access your iCloud passwords with Chrome on Windows

iCloud may be Apple’s thing, but if you have an iPhone and a PC, you can still get at your passwords. You’ll need to download iCloud for Windows first and make sure it’s updated to the latest version. Then you’ll need to grab the iCloud Passwords extension in the Chrome store and then sign in to turn on both. Once you enter your verification code, you’ll be able to grab passwords from your iCloud Keychain when visiting a site in Chrome on your PC just as if you were using Safari on your Mac.

Get a second password manager

While iCloud Keychain is safe, secure, and easy, it’s also very tied to both our Apple devices and Safari in general. There’s no easy way to export passwords, sync notes, share passwords with other browsers, or access your keychain on an Android phone or Chromebook. For those situations, you’ll need a third-party password manager, so it’s not a bad idea to run one alongside iCloud Keychain on your Apple device. Our sister site, PCWorld, has a complete roundup of the best ones you can buy and many of them are available for iOS and macOS as well.