hotwheels 22

Q: password software methodologies (and keychain)

i am looking to fine tune my use of passwords on my various computers and i am wondering if someone wouldn't mind offering their expertise in a remedial tutorial.

 

the issue is that i have safari on a laptop and a desktop and these are connected via icloud. i also have an iphone. presumably all of these are connected to the same (?) KEYCHAIN which stores passwords for things like websites and credit cards and autocompleting personal information i guess.

 

then i also have the 1Pass software for the mac.

 

i tend to store passwords in the 1Pass software but also click to confirm storage of passwords on keychain. however, i don't understand how all this works or if they are related or completely independent or what.

 

for instance, if i am paying for something online keychain nicely stores my credit card data.

if i am logging into a website the 1Pass safari plugin nicely stores my login information

however, i keep a backup of my passwords in notetaking software as i seem to frequently need it (for instance when the password in 1Pass is not working for some reason). also, these are safe passwords but not exceptionally safe passwords that are generated by an algorithm. i would like to move to safer passwords but i can't figure out how this would work.

 

1. 1Pass does not seem to enter passwords into ANY website that i access so i sometimes have to ACCESS the database and FIND the website and then manually enter the information.

 

2. 1Pass does not seem to automatically enter date into a website on the IPHONE when in safari (i guess there is no iOS plugin?) so in this case when i land on a page that i need to do something with - i need to BACK OUT of safari, get into 1Pass, FIND THE WEBSITE and then navigate to the website via the 1Pass app and then try to login to the site. this is a major pain.

 

3. /if/ a password does not work in 1Pass and /if/ i didn't record the password manually in notetaking software, what would i do? i guess i would reset the password via the website and enter the new password in 1Pass.

 

4. how does KEYCHAIN interface with all this? does it work the same or somehow it is working in the background? does KEYCHAIN only autocomplete passwords and logins in safari or does it ask for a prompt to do this? if i don't get a prompt to add a password to keychain can i add it myself?

 

5. what happens in the above workflows when i am using someone else's phone because my battery died or if i have to use someone else's computer?! i guess i could log onto my iCloud account if it is a trusted friend's computer and get access to safari passwords via keychain? would i do this on someone else's iPhone? i mean, i couldn't do it on someone else's non-iphone could i? and how do i access 1Pass when not using one of my devices?

 

6. give question #5, it seems almost mission critical to keep a list of passwords in notetaking software that is independent of the software (1Pass and/or Keychain). is there a way to export all this information to an easily accessible document that i could keep with me or print out?

 

THANKS

iPhone 6, iOS 8

Posted on Aug 15, 2016 7:47 AM

Close

Q: password software methodologies (and keychain)

  • All replies
  • Helpful answers

  • by Christopher Lim,Helpful

    Christopher Lim Christopher Lim Aug 15, 2016 9:29 AM in response to hotwheels 22
    Level 2 (288 points)
    Mac OS X
    Aug 15, 2016 9:29 AM in response to hotwheels 22

    Since most of your questions pertain to 1Password, I would suggest taking a look at their support page here.

     

    4. Keychain can provide autofill for usernames and passwords within safari, it might also pre-enter a username and password. If you delete the text it has entered, it will list a list of usernames below the username/password text field. When you have a valid password field, keychain should show a key symbol to the right, in the text field, clicking on it will bring down a list of saved passwords and usernames.

    Screen Shot 2016-08-15 at 11.04.14 PM.png

    • You may add the password yourself.

     

    5. When logging in to a device with your account, keychain will be disabled by default and will require you to switch it on in settings. Either that or requiring you to select to use iCloud keychain when setting up a device. And to switch it on, you need to either provide verification on another verified device, or type in a security code, or both depending on your security settings. More on that at the F.A.Q. here. Keep in mind, Keychain is an Apple service and will not work on non-Apple operating systems.

     

    6. Keeping your passwords on a saved and synced document accessible across the internet is a significant security risk and is not recommended. However, if you want notes that can be synced and accessible from the internet, Apple's built in Notes app serves that purpose. Setting a password to lock your notes can also protect slightly sensitive data like national identification numbers numbers and email addresses from prying eyes. However, it is highly unrecommended to store confidential data such as passwords in said app.

     

    DISCLAIMER: Apple Support Communites are composed of users, not official Apple Support Technicians. Our views may not reflect that of Apple Inc. I also do not receive financial reimbursement for the promotion of any and all services mentioned. Mentions of any services are purely to answer the question posed or to demonstrate solutions.

  • by Eric Root,

    Eric Root Eric Root Aug 15, 2016 8:51 AM in response to hotwheels 22
    Level 9 (71,294 points)
    iTunes
    Aug 15, 2016 8:51 AM in response to hotwheels 22

    If you are using 1 Password, do you have the Safari extension loaded? That put an access link to 1 Password in the menu bar. If you do not have it loaded, Safari/Safari Extensions. 1 Password doesn't autofill websites.

     

    On the iPhone, you can directly access websites from inside the 1 Password app.

     

    Usually when you change a website's password, 1 Password will ask if you want to update it.

     

    The Apple keychain is completely separate from 1 Password. It works in the background. It will autofill most websites.

     

    On someone else's device/computer, you would need to log into iCloud using your Apple ID. You wouldn't have access to 1 Password unless the app/application is installed and you are signed in. You would also need access to however you sync 1 Password.

  • by hotwheels 22,

    hotwheels 22 hotwheels 22 Aug 15, 2016 9:32 AM in response to Christopher Lim
    Level 1 (12 points)
    Desktops
    Aug 15, 2016 9:32 AM in response to Christopher Lim

    hi christopher.

    thanks very much. so if i just stick with keychain for now.

    i turn it on on all my devices (i am pretty sure it is turned on) and i get a prompt when in safari (ONLY when i am in safari i guess) and it gives me a prompt to autocomplete a login and password or credit card information?

    can i LOOK UP the password for a particular website in the keychain app?

    also, what do i do if i am not on one of my devices? i mean, how do i access this data so i can get things done even if i am not on one of my devices?

    THANKS

  • by Christopher Lim,Helpful

    Christopher Lim Christopher Lim Aug 15, 2016 10:17 AM in response to hotwheels 22
    Level 2 (288 points)
    Mac OS X
    Aug 15, 2016 10:17 AM in response to hotwheels 22

    I turn it on on all my devices (i am pretty sure it is turned on) and i get a prompt when in safari (ONLY when i am in safari i guess) and it gives me a prompt to autocomplete a login and password or credit card information?

    - Yes, it will behave as a described earlier, for desktops systems (the category this is posted in) however, on iOS, the experience varies a little. Have a look at this website here for help. And also Apple's support page here.

     

    Can I look up the password for a particular website in the keychain app?

    - Yes, for macOS, you can, provided you have both the iCloud Account name and password as well as the computer's user name and password. On iOS, I am not currently aware whether there is an equivalent keychain "App". However, on both macOS and iOS, you can also look it up in Safari's settings under the tab "passwords"[macOS] and "Saved Passwords" [iOS].

     

    Also, what do i do if i am not on one of my devices? i mean, how do i access this data so i can get things done even if i am not on one of my devices?

    - While it is not recommended to enter personal information on a device other than your own, it can be seen why such functionality might be desired. For information such as your library card number or your NIC that is personal but not as sensitive or pose as large a security threat as bank account number, you could perhaps store it in a locked note in Notes. For your more confidential information, you can also do the same, but at your own risks [read: NOT RECOMMENDED]. Read about locked notes here. Note: Locked Notes can be viewed from the Notes App in the iCloud interface and therefore can be viewed on devices other than your own [the page will only load in a desktop version, mobile version not available and will have to reload as desktop version to gain access].

     

    DISCLAIMER: Apple Support Communites is a USER-based support community, not official Apple Support Technicians. My views may not reflect or represent that of Apple Inc. No financial gains are awarded for the promotion of any and all products and services mentioned. Any mentions on links are on a as-needed basis to either enhance the answer or to answer the question. Any inconsistency in the information provided is not desired or intended.

  • by hotwheels 22,

    hotwheels 22 hotwheels 22 Aug 15, 2016 10:20 AM in response to Christopher Lim
    Level 1 (12 points)
    Desktops
    Aug 15, 2016 10:20 AM in response to Christopher Lim

    hi christopher, eric,

     

    so i am doing a little digging here. looks like i can access safari passwords via Preferences > Password Tab but then if i get into KEYCHAIN app i have a list of "login" Passwords? are these exactly the same?

     

    is there any way to print out this information? Password Tab has an option to show passwords but i don't see this in keychain?

     

    also, is there a benefit to using the SECURE NOTES in Keychain instead of a Locked Note in NOTES APP or are these the same thing?

     

    THANK YOU

  • by Eric Root,

    Eric Root Eric Root Aug 15, 2016 10:27 AM in response to hotwheels 22
    Level 9 (71,294 points)
    iTunes
    Aug 15, 2016 10:27 AM in response to hotwheels 22

    1. They should be the same.

     

    2. In Keychain Access, double click on the password to gain access.

     

    3. Notes in either place are about the same.

     

    To print, take a screen shot of Safari/Preferences/Password with all passwords revealed. Print the screen shot using Preview.

     

    Screen shots

  • by hotwheels 22,

    hotwheels 22 hotwheels 22 Aug 15, 2016 10:44 AM in response to Eric Root
    Level 1 (12 points)
    Desktops
    Aug 15, 2016 10:44 AM in response to Eric Root

    hi eric, christopher.

     

    thanks for the big push getting me started on this.

     

    so from what i can tell i can access KEYCHAIN passwords only if i go through the Safari settings on my iphone but i can access them through the keychain app on my computers.

     

    and then for secure notes i can access them either from the Notes app or the keychain on my computers and i can /also/ access (or enter them) form the notes app on my phone?

     

    THANKS

  • by Eric Root,

    Eric Root Eric Root Aug 15, 2016 10:50 AM in response to hotwheels 22
    Level 9 (71,294 points)
    iTunes
    Aug 15, 2016 10:50 AM in response to hotwheels 22

    You are welcome. Correct. Personally, I'd use the Notes application/app because it is easier to access.

  • by Christopher Lim,

    Christopher Lim Christopher Lim Aug 15, 2016 11:16 AM in response to hotwheels 22
    Level 2 (288 points)
    Mac OS X
    Aug 15, 2016 11:16 AM in response to hotwheels 22

    1. Eric is half right. Passwords in keychain include your device passwords, mail profile passwords, network accounts, WiFi, any password encrypted files you have on your devices and also practically any password in or out of safari while the ones in safari are just your website logins. This is possibly why Keychain does not allow you to show all the passwords at the same time, it would be a risky move.

     

    2. Get info for the profile you want to open, then check show password, then verify as required.

     

    3. I do not believe secure notes is accessible from iCloud, In fact, I'm sorry, I was unaware of their existence, I was referring to locked notes in Notes.app for the rest of my previous replies.

     

    Also, as for printing all your passwords out, that might not be the best of ideas... but the method Eric pointed out should be just fine.

  • by hotwheels 22,

    hotwheels 22 hotwheels 22 Aug 15, 2016 11:33 AM in response to Christopher Lim
    Level 1 (12 points)
    Desktops
    Aug 15, 2016 11:33 AM in response to Christopher Lim

    ok. thanks.

     

    is there a good link for locked notes? I need to put stuff there or in 1pass I think.

     

    also, does anyone know what mail settings are synced in keychain? I've had a terrible time with mail setting (certificates and IMAP outgoing servers in particular) and could never figure out if anything synced between devices.

  • by Christopher Lim,

    Christopher Lim Christopher Lim Aug 15, 2016 11:45 AM in response to hotwheels 22
    Level 2 (288 points)
    Mac OS X
    Aug 15, 2016 11:45 AM in response to hotwheels 22

    Locked notes can be created in the standard Notes app preinstalled with iOS and macOS. Here are a few articles to help out.

    Keep your notes secure with password-protection - Apple Support

    iCloud: Notes overview

     

    I am not sure what mail settings are saved, but from what I know how to read, they are mainly auth tokens, these I do not believe I are synced across devices. Keep in mind, Keychain is not entirely synced. Keychain is basically the system that deals with all the passwords and keys on your Mac, including even your iMessage Signing Keys. iCloud keychain is only a portion of the data that is in Keychain, but iCloud Keychain data is synced across devices, normally WiFi passwords and Safari Logins.

  • by hotwheels 22,

    hotwheels 22 hotwheels 22 Aug 15, 2016 12:17 PM in response to Christopher Lim
    Level 1 (12 points)
    Desktops
    Aug 15, 2016 12:17 PM in response to Christopher Lim

    thanks a ton guys!