Definition
iCloud Keychain is Apple’s credential-sync feature: Apple’s support page describes it as keeping your passwords and other secure information updated across your devices and shared with people you trust. It remembers Safari and app usernames, passwords and passkeys, credit card information and security codes, and Wi-Fi passwords, and autofills them on any device you approve. See the official support page.
How it works
Turning it on requires current software on the device and two-factor authentication for the Apple Account. On iPhone, iPad or Apple Vision Pro: Settings > [your name] > iCloud > Saved to iCloud > Passwords (Password and Keychain on iOS 17 or earlier), then tap Sync This Device; on Mac: System Settings > [your name] > iCloud > Passwords > Sync This Mac. Apple states the data is protected with end-to-end encryption: the key is made from information unique to your device combined with your device passcode, and no one else can access or read the data in transit or in storage. When iCloud Keychain is turned off, the information stays on the device and stops updating across devices; an encrypted copy remains on iCloud servers and syncing resumes when the feature is turned back on.
Usage
Syncing and autofilling credentials across iPhone, iPad, Mac and Apple Vision Pro; sharing passwords and passkeys with trusted contacts through shared password groups (iOS 17, iPadOS 17, macOS Sonoma or later). The interface for viewing and managing these credentials is the system’s Passwords app.
Related and confusable terms
- iCloud Keychain vs. the Passwords app: the former is the mechanism that syncs credentials over iCloud; the latter is the interface for viewing and managing them. They work together.
- vs. the local Keychain: on macOS, “Keychain” also refers to the system’s long-standing local credential storage; iCloud Keychain specifically means the part synced across approved devices via iCloud.
- vs. third-party managers such as 1Password: third-party products install separately and work across platforms, with different business models and capabilities; using both side by side is a matter of personal needs.
In this episode
In Weekly #007, in the chapter “密码管理：随机密码、通行密钥与换设备” (Password management: random passwords, passkeys and switching devices), 杨攀 (Yang Pan) says he no longer keeps site-specific passwords for most purposes — everything is generated by Apple’s Keychain, that he has used Keychain for over ten years, and that after the product’s form evolved it is called Passwords, filling credentials on his Mac with a fingerprint. This is one participant’s personal setup. See the episode 007 chapter (Chinese transcript).
Frequently asked questions
What is iCloud Keychain?
Apple’s credential-sync feature: it syncs passwords, passkeys, credit card details and Wi-Fi passwords across approved devices with end-to-end encryption and autofills them in Safari and apps. See the official support page.
Where do I turn on iCloud Keychain?
iPhone/iPad: Settings > [your name] > iCloud > Saved to iCloud > Passwords > Sync This Device. Mac: System Settings > [your name] > iCloud > Passwords > Sync This Mac. Two-factor authentication must be enabled for the Apple Account first.
Should I enable iCloud Keychain?
It depends on your needs: when enabled, credentials sync and autofill across approved devices, and Apple states the data is end-to-end encrypted so that no one else can read it in transit or storage; when disabled, the information stays local and stops updating across devices. Details are on the official support page.
Where can I see my saved passwords?
In the system’s Passwords app, available on iPhone, iPad and Mac; see the Passwords entry and Apple’s support page for the steps.