Using iCloud Passwords with third-party browsers on macOS
Previously the ability to auto-fill passwords stored in iCloud Keychain when browsing the web on a Mac has required Safari, but you can now use iCloud Keychain in other browsers, like Google Chrome or Microsoft Edge.
(Firefox is not supported.)
This requires:
- macOS Monterey 12.7 or later, macOS Ventura 13.6 or later, or macOS Sonoma 14.0 (available next week)
- The latest version available of your Chromium-based browser of choice, including, but not limited to:
- Google Chrome
- Microsoft Edge
- Brave
- Opera
- Arc
- iCloud Keychain enabled on your Mac - Set up iCloud Keychain - Apple Support
- iCloud Passwords Extension (Version 2.0.5 or later)
- Download here for Microsoft Edge: iCloud Passwords - Microsoft Edge Addons
- Download here for all other browsers: iCloud Passwords - Chrome Web Store
Once you've installed the browser extension, setup and use is incredibly easy:
The first time you use iCloud Passwords after starting the application, you'll need to enter a six-digit verification code from your Mac. This is different from your Apple ID two-factor authentication code. If you quit the application (either from the menu bar, or by pressing Command+Q), you'll need to enter a new code when you sign in to a website again.
Once verified, iCloud Passwords will offer to auto-fill usernames/email addresses, passwords, and even stored multi-factor authentication codes. To complete the auto-fill, you'll need to authenticate through macOS through Touch ID, your passwords, or a paired Apple Watch.
In addition to auto-filling passwords, the iCloud Passwords extension can also save passwords to your iCloud Keychain when creating or signing into a new account. iCloud Passwords does not suggest new passwords, like in Safari, but you can quickly access all stored passwords in System Settings (System Preferences) or open the page in Safari, and generate a strong password in either of those applications.
This under-the-radar update should help prevent you from re-using weak passwords across multiple sites, now that it's even easier to sync your passwords across devices while using your application of choice. You may also want to:
- Disable saving/autofilling of passwords already stored in your browser
- If both iCloud Passwords and [Google Passwords, Edge Password Manager, etc] are enabled, they may compete to auto-fill your information, causing the interfaces to overlap.
- Changing these settings vary by browser
- Pin iCloud Passwords to your browser toolbar
- You need to enable the extension every time you start your browser again by clicking on it. By default, extensions are gathered and hidden in a menu (or two).
- Pinning iCloud Passwords to your toolbar can let you more quickly access the extension, and see if it's already enabled at a glance.
- Generate strong passwords in Safari or in System Settings
- Re-using passwords across multiple services or using passwords that contain real words or are short in length may put your accounts at risk of compromise.
- You can open any site in Safari to generate a stronger password, or you can generate a strong password manually in System Settings.
- You can also create strong passwords for your accounts on your iPhone, and they'll sync securely and automatically using iCloud.
- When possible, use a passkey instead
- Passkeys allow you to sign into an account without having to remember a password, and they sync across your devices the same way passwords do.
- Passkeys are more secure than passwords. Because only you have a copy – not the site or service you're trying to log into – it's harder for them to be compromised. And because you don't know the passkey – only your device does – passkeys are much more resistant to phishing attacks.
- Passkeys are just as easy to use as auto-fill, too. Passkeys rely on Touch ID or Face ID on your Mac or nearby iPhone or iPad, so the process of signing in should feel similar.