

With Touch ID or a passcode in iOS and FileVault 2 in OS X, passwords are highly secure as well when you’re shut down (OS X) or locked (iOS). OS X and iOS have to be unlocked to fill Keychain entries, and OS X’s Keychain Access app requires an administrative or user password to unlock and view passwords.


Keychain and iCloud Keychain are pretty dang robust in these regards. Strong encryption should prevent a snooper from unscrambling new entries, retrievals, and updates, as well as interactive sessions. It should be difficult or impossible for an attacker to access and decrypt cloud-stored passwords.ĭata in transit while being synchronized or to and from Web-based access. Passwords should be secure on a device against anyone but the owner gaining access.ĭata stored on servers. How secure is your data?Ī password “safe” needs to keep the passwords, well, safe, in three major areas:ĭata at rest on a device. While Apple’s Keychain, 1Password, and LastPass can all store other sorts of data securely, passwords are the most reliable element that can used across a whole ecosystem and across platforms.
