{"id":3910,"date":"2013-11-05T10:00:14","date_gmt":"2013-11-05T15:00:14","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=3910"},"modified":"2013-11-05T10:00:14","modified_gmt":"2013-11-05T15:00:14","slug":"apples-icloud-keychain-it-works-but-with-frustrating-limitations","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2013\/11\/05\/apples-icloud-keychain-it-works-but-with-frustrating-limitations\/","title":{"rendered":"Apple\u2019s iCloud Keychain: It works, but with frustrating limitations"},"content":{"rendered":"
\n
\"\"
\n
Aurich Lawson \/ Thinkstock<\/div>\n<\/figcaption><\/figure>\n

In the latest versions of OS X and iOS, Apple’s new iCloud Keychain provides one of the most important pieces of functionality for security-conscious users: a password manager.<\/p>\n

Unfortunately, it’s kind of a mess. iCloud Keychain does accomplish the most basic things you’d expect a password manager to do, but it often does so in an awkward manner. Important functionality is hard enough to find that it may be effectively hidden from the average user, particularly on iPhones and iPads.<\/p>\n

Ultimately, iCloud Keychain can be put to good use if you’ve carefully examined what it does well and doesn’t do well. It works best as a complement to a complete service like 1Password or LastPass, but it just isn’t convenient and robust enough to act as a standalone password manager.<\/p>\n

The short version is that iCloud Keychain does a good job of automatically entering passwords in websites on Apple’s Safari browser, both with iOS devices and Macs. It does not work with any third-party browsers on OS X or iOS. It cannot fill in passwords on an iOS app unless the developer of that app has done some legwork to integrate with iCloud Keychain. Worse, it stores the passwords in an inconvenient location on iOS, making it hard to copy and paste passwords for those cases when iCloud Keychain can’t automatically fill them in. Finally, it lacks some of the basic features that make standalone password managers more than just password managers, such as syncing of encrypted notes across both desktops and mobile devices.<\/p>\n

Setting it up<\/h2>\n

iCloud Keychain is available in OS X Mavericks for Mac computers and iOS 7.0.3 for iPhones, iPads, and iPod Touches. When you set up any such device, you’ll be asked if you want to use iCloud Keychain. With the first device, you’ll choose either a four-digit numeric code or a complex password to secure the keychain. To add any subsequent device to iCloud Keychain, you can type in the passcode or approve the new device from a device that already runs the password manager.<\/p>\n

\"\"<\/a>
\n
Enlarge<\/a><\/div>\n<\/figcaption><\/figure>\n

You can also set up iCloud Keychain without any passcode or password. Apple states in a support document<\/a>\u00a0that this allows you to store passwords “only locally” on your devices, but it’s clear from our tests that the system stores passwords in the cloud no matter what. The difference is that without a passcode there won’t be a permanent backup of your keychain that you can restore if you happen to lose all of your Apple devices. You’ll also have to approve any new device from an existing device, with no option to access the keychain with just the passcode. We covered this and other security aspects of iCloud Keychain in a previous article this week<\/a>.<\/p>\n

For myself, I don’t mind storing some website passwords with iCloud, but I prefer to keep my most crucial credentials (banking, credit cards, etc.) in 1Password. But let’s just say you want to trust all your passwords to Apple. How can you use iCloud Keychain effectively?<\/p>\n

Work within Apple’s limitations<\/h2>\n

First off, make sure you always use Safari. When you fill in passwords or create new Web accounts, iCloud Keychain will offer to save your passwords and create new, complex ones if you need them. While most password generators will let you change the default length and composition of the password, iCloud Keychain in Safari always makes passwords of 12 letters and numbers and three dashes:<\/p>\n

\"\"
\n
Safari on Mac.<\/div>\n<\/figcaption><\/figure>\n

If you want a longer password, you’ll have to come up with it yourself, which sort of defeats the purpose of having an automatic generator. But since iCloud Keychain will sync your password across devices, that’s perhaps not a huge deal. You can just bang a bunch of random characters into the keyboard without worrying about remembering them.<\/p>\n

Still, I prefer the 1Password approach better:<\/p>\n

\"\"
\n
1Password Menubar tool.<\/div>\n<\/figcaption><\/figure>\n

If you want your passwords in iCloud Keychain to be automatically filled in on Safari on any Mac or iOS device you use, you’ll have to click a couple of settings. In Safari on Mac, go to Preferences and then Passwords and click the box that says, “Autofill user names and passwords.” If you want, also click the box next to, “Allow Autofill even for websites that request passwords not be saved.”<\/p>\n

As John Siracusa notes in the Mavericks review<\/a>, “enabling this override requires that the Mac be configured to lock the screen when idle. Second, Safari still fails to auto-fill passwords on some websites, most notably Apple\u2019s own\u00a0icloud.com<\/a>.”<\/p>\n

Once you get out of Safari, things become less convenient. On the Mac, 1Password has a standalone desktop application, a Menubar tool, and extensions for every major browser. That makes generating passwords and filling them in easy no matter what you’re using.<\/p>\n

iCloud Keychain’s non-Safari functionality is found in the Mac’s Keychain Access tool:<\/p>\n

\"\"<\/figure>\n

This is where you’d go if you need to copy a password to paste into a non-Safari browser or a desktop application. (You can also copy passwords into the Mac’s clipboard from within Safari by going into Preferences and selecting the Passwords tab.) For example, let’s open my Twitter password entry in Keychain Access:<\/p>\n

\"\"<\/a>
\n
Enlarge<\/a><\/div>\n<\/figcaption><\/figure>\n

If I click “Show password,” I will be asked to enter my keychain password, which happens to be the same long passphrase I use to unlock my computer. If I enter that correctly, the Twitter password will become visible, and I can copy it. Somewhat frustratingly, clicking that lock on the bottom right opens up a password generator that lets you create passwords of arbitrary length and composition:<\/p>\n

\"\"<\/figure>\n

I say that it’s frustrating because the same option doesn’t appear in Safari, where it would be more useful.<\/p>\n

iOS syncing limited to passwords, excludes secure notes<\/h2>\n

Let’s switch gears and look at iOS. This is where iCloud Keychain starts to get simultaneously more useful and more frustrating.<\/p>\n

Because of the restrictions Apple places on third-party applications for iOS, password managers can’t automatically log you into websites on Safari. They can include a browser within their app, but not integrate with an iPhone’s or iPad’s default browser.<\/p>\n

Apple is Apple, so it doesn’t face those restrictions. iCloud Keychain is thus the only password manager to integrate with Safari on iOS (barring some jailbreak tweak I’m not aware of).<\/p>\n

iCloud Keychain won’t integrate with most third-party apps today, since developers have to add that integration themselves. “Developers can update their apps to work with iCloud Keychain,” Apple says<\/a>. “Passwords saved by those apps are then kept up to date on all devices that use the app and [are] running iOS 7.0.3 or later or OS X Mavericks v10.9 or later.”<\/p>\n

In Safari on iOS, iCloud Keychain works as well as it does on the Mac, filling in logins and helping you generate passwords for new ones. As on the Mac, you have to click some settings to make sure it works. Head into Settings\/Safari\/Passwords & Autofill and click “Names and Passwords” and “Always Allow.”<\/p>\n

\"\"<\/figure>\n

The process of copying a password into the iOS clipboard so that it can be filled into an application other than Safari seems unnecessarily difficult to figure out. But if you go into\u00a0Settings\/Safari\/Passwords & Autofill\/Saved Passwords, click an entry, then type your phone’s passcode, you’ll see a list of logins in alphabetical order. There’s no way to search the list, so just scroll until you find the entry you want, click it, and you’ll see\u00a0something like this:<\/p>\n

\"\"<\/figure>\n

There’s no indication on the screen that the password can be copied, but if you hold your finger down on the user name or password, you’ll receive that option. Unfortunately, you can’t click on the website itself. After becoming accustomed to 1Password, I assumed clicking a website in a password manager’s login list would automatically open the browser and fill in the login. With iCloud Keychain, that’s not the case. You can’t even copy the URL and paste it into Safari manually.<\/p>\n

What’s also frustrating is that the password entries don’t contain any notes you might have made in your keychain entry on the Mac. In the screenshots earlier in this article, you can see iCloud Keychain on the Mac lets you add comments to individual logins or make standalone secure notes.<\/p>\n

As we described in our article, “The secret to online safety: Lies, random characters, and<\/em> a password manager,<\/a>” a strong personal security strategy may include making up nonsensical answers to security questions, which are too easy to break if you use standards like “Mother’s maiden name.” A good password manager will let you store any additional information you need for each login and sync it across both desktop and mobile. iCloud Keychain doesn’t do that.<\/p>\n

Useful, but not as useful as it should be<\/h2>\n

iCloud Keychain is indeed a useful addition to OS X and iOS, especially for people who use Safari across both operating systems. On iOS, iCloud Keychain fills the chief gap in third-party password managers\u2014the lack of integration with Safari. For something that comes free with the operating system, that’s a nice feature. Combined with the automatic password generator (despite its non-customizability), iCloud Keychain can help people who don’t already use a password manager improve their defenses against hackers.<\/p>\n

But in almost every other way, iCloud Keychain falls short of the functionality one expects from a paid password manager.\u00a0The lack of cross-browser support, the password generator’s limitations, the inconvenient locations of keychain information, and the failure to sync secure notes across desktop and mobile are all entries for the cons column. It’s possible Apple will fill in all the gaps someday, but as of now, people who take security seriously aren’t likely to find everything they want in iCloud Keychain.<\/p>\n

via ArsTechnica<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Aurich Lawson \/ Thinkstock In the latest versions of OS X and iOS, Apple’s new iCloud Keychain provides one of […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[2,9],"tags":[501,796],"class_list":["post-3910","post","type-post","status-publish","format-standard","hentry","category-apple","category-software","tag-icloud-keychain","tag-password-manager"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/papNkV-114","jetpack-related-posts":[{"id":9305,"url":"https:\/\/nccomputertech.com\/techtalk\/2018\/02\/26\/this-week-in-tech-655-banana-is-phone\/","url_meta":{"origin":3910,"position":0},"title":"This Week in Tech 655: Banana Is Phone","author":"NCCT","date":"February 26, 2018","format":false,"excerpt":"https:\/\/youtu.be\/3Ndfvf28O5o Samsung announces 2 new phones as Mobile World Congress kicks off in Barcelona. iCloud keys are stored in China. All 150 new emojis for 2018 revealed. Nokia's newest phone is a nod to The Matrix. GDPR and H.R. 1865 and their implications. Intel knew about flaws in chips but\u2026","rel":"","context":"In "Technology"","block_context":{"text":"Technology","link":"https:\/\/nccomputertech.com\/techtalk\/category\/technology\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/3Ndfvf28O5o\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":9516,"url":"https:\/\/nccomputertech.com\/techtalk\/2019\/02\/03\/to-the-woodshed-with-you-this-week-in-tech-704\/","url_meta":{"origin":3910,"position":1},"title":"To the Woodshed With You! – This Week in Tech 704","author":"NCCT","date":"February 3, 2019","format":false,"excerpt":"https:\/\/youtu.be\/14UX3TQ0K3Q FaceTime Flaw, Apple Spanks Facebook and Google, Huawei Suspicions, FBI Wants Your DNA, and more. \u2022 How to Watch the Superbowl Commercials Without All That Annoying Football \u2022 Apple's Not So Horrible Quarterly Earnings \u2022 Facetime Flaw Dulls Apple's Privacy Shine \u2022 Apple Spanks Facebook and Google for Data\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/14UX3TQ0K3Q\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":9376,"url":"https:\/\/nccomputertech.com\/techtalk\/2018\/07\/15\/this-week-in-tech-675-this-show-does-not-care-about-humans\/","url_meta":{"origin":3910,"position":2},"title":"This Week in Tech 675: This Show Does Not Care About Humans","author":"NCCT","date":"July 15, 2018","format":false,"excerpt":"https:\/\/youtu.be\/6okjlrV5zgg Amazon\u2019s juggernaut, HBO vs Netflix, Musk madness, and more. --Do Apple's new MacBooks fix the company's keyboard woes? --Amazon Prime Day starts tomorrow. Will it be worth the hype? Will it push Amazon's share of the e-commerce market past 50%? --Folding tablets. Phones with 9 cameras. What is next?\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/6okjlrV5zgg\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":9432,"url":"https:\/\/nccomputertech.com\/techtalk\/2018\/11\/12\/ravioli-for-the-recount-this-week-in-tech-692\/","url_meta":{"origin":3910,"position":3},"title":"Ravioli for the Recount – This Week in Tech 692","author":"NCCT","date":"November 12, 2018","format":false,"excerpt":"https:\/\/youtu.be\/JXOWXzYDumg - Apple's new iPad Pro is not the future of Apple, but it does point to it. - Alibaba sells $1 billion in the first 85 seconds of Singles Day. - Tech doomsayer says that the vast majority of people will soon be \"The Useless Class.\" - 22% of\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/JXOWXzYDumg\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":9812,"url":"https:\/\/nccomputertech.com\/techtalk\/2024\/11\/08\/slow-and-steady-m4-macbook-pro-apple-q424-pixelmator\/","url_meta":{"origin":3910,"position":4},"title":"Slow and Steady – M4 MacBook Pro, Apple Q424, Pixelmator","author":"NCCT","date":"November 8, 2024","format":false,"excerpt":"https:\/\/youtu.be\/etW5-oInyGA As expected following the end of last week's MacBreak Weekly, Apple announced the new M4, M4 Pro, and M4 Max MacBook Pros. Jason recaps the results of Apple's Q424. And Apple acquires Pixelmator. \u2022 Early Apple M4 Pro and M4 Max benchmarks hint at a massive performance boost. \u2022\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/etW5-oInyGA\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":9385,"url":"https:\/\/nccomputertech.com\/techtalk\/2018\/07\/23\/this-week-in-tech-676-falling-asleep-as-the-robots-wake-up\/","url_meta":{"origin":3910,"position":5},"title":"This Week in Tech 676: Falling Asleep as the Robots Wake Up","author":"NCCT","date":"July 23, 2018","format":false,"excerpt":"https:\/\/youtu.be\/uV5cQYtuJjU This Week in Tech - The future is flying cars! (Or not-flying cars, perhaps holes in the ground.) - Apple's new MacBooks suffering from thermal throttling - is it the end for Intel? - Google hit with $5 billion fine by EU for Android shenanigans. - Will Fuschia be\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/uV5cQYtuJjU\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/3910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/comments?post=3910"}],"version-history":[{"count":0,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/3910\/revisions"}],"wp:attachment":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/media?parent=3910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/categories?post=3910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/tags?post=3910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}