Website passwords in keychains deleted after Catalina update

After upgrading to Catalina, the website passwords -- but not app passwords, secure notes, certs, or keys -- were deleted from all keychains in `~/Library/Keychains`. Keychains stored elsewhere were not affected.


I use different keychain files for different purposes (personal, work, etc.). Many but not all of these are stored in `~/Library/Keychains`. I can see in the filesystem modification time that all the keychains in there were updated as of the time I upgraded to Catalina although many of these keychains haven't been unlocked in months. It seems there must have been some process as part of the upgrade that deleted things.


I ran the unix utility `strings` on the keychains which usually can reveal the names of items in a keychain database file. Unfortunately, it looks like the passwords in question have been completely deleted.


Notes:

  • MacOS Catalina 10.15
  • MacBook Pro (Retina, Mid 2012)
  • Safari Version 13.0.2
  • iCloud *not* used to sync the keychain


Possibly related: https://discussions.apple.com/thread/250700942

MacBook Pro

Posted on Oct 9, 2019 4:08 PM

Reply

Similar questions

17 replies

Oct 23, 2019 1:10 PM in response to davidfischer

I finally called Apple Support and got a resolution to this. It took a while but it did fix the problem.

The fix involved going into Time Machine and replacing files from the the Library/keychains in the updated Catalina OS with the older file. It also involved going into iCloud and logging out of my Mac and iPhon, deleting them and then re- adding them. Not something I would suggest for someone to do without the help of a Apple Support person.

Nov 8, 2019 1:30 PM in response to TeknoJKD

I just wanted to confirm that this bug is still present in 10.15.1 (19B88).



TeknoJKD wrote:

It gets worse... Catalina will delete the web passwords from your keychain more than once. It happened to me on the initial upgrade, and it continues to happen when I reboot, wake from sleep, and sometimes just idling. It will purge any Internet keychain entry on a regular basis.

I experienced this as well for the first time after upgrading to 10.15.1. Immediately after the upgrade, I checked my keychains and all the passwords were still there. However, the next day -- I haven't rebooted since the upgrade -- the passwords were deleted and required being restored.

Nov 10, 2019 1:02 PM in response to davidfischer

Good to know. Was hoping for 10.15.1, but now maybe 10.15.2 coming up...?


I just ran a test (now in 10.15.1 as well) to maybe help determine if it's iCloud pushing a wipe to macOS and the keychain. Verified that my keychain contained Internet passwords, and then disconnected from the Internet. Was going to leave it offline all day, expecting the passwords to remain intact until going back online... Incorrect assumption! It took less than two minutes after unplugging for the passwords to vanish from the keychain again.


UX 101: When performing a destructive operation you ask for confirmation, especially if it's critical data, and/or where retrieval is not simple. Variations of this core concept have appeared in the Apple Human Interface Guidelines since the 1990's... At the very least we need to be warned when this is going to happen, and be given an opportunity to decline the operation. At best, this behavior will just stop, and hopefully soon. I will be reporting this bug every version change to Catalina until it is fixed.

Dec 13, 2019 1:12 PM in response to davidfischer

Catalina 10.15.2 is still broken, website passwords are being deleted without warning.


You'd think this would be a high priority - losing bank account passwords, tax systems, health care, is the kind of thing that could end up in a class action lawsuit. Or so I would be thinking were I a product manager anyway. Assuming of course, that this got escalated at some point beyond intro tech support.

Dec 19, 2019 2:33 PM in response to TeknoJKD

I just took the 10.15.2 (19C57) upgrade last night. While only time will tell for sure, I didn't have to restore my keychains after the upgrade and I haven't yet had the problem so far today. There wasn't anything in the release notes about fixing this so it may just be coincidence but I had to restore my keychain immediately after the 10.15.1 and 10.15(.0) releases.


I'll keep the thread updated.

Dec 21, 2019 7:50 AM in response to davidfischer

The problem is not fixed. It took a while after upgrading but the problem manifested itself again by deleting a number of Internet Password entries.


One possibly related note is that I also constantly get popup notifications like "Reminders wants to use the <name> keychain." (mentioned https://discussions.apple.com/thread/250848128). These notifications can't be dismissed as hitting Cancel just pops it up again.

Jan 14, 2020 1:31 AM in response to davidfischer

I have the same issue here under Catalina 10.15.2: https://discussions.apple.com/thread/250948138

I called Apple Support without success, the problem is not fixed


PAY ATTENTION APPLE : Erasing secure and protected data by an unauthorized application is a very serious problem. This is more than a security breach, it is a system attack that erases sensitive user data in violation of data protection laws.


Oct 11, 2019 10:39 AM in response to davidfischer

Just to give a small update, I was able to recover all the individual entries for all my keychains from backups.


While restoring, I did find some (~50%, not all) "internet password" entries missing from a keychain stored outside of `~/Library/Keychains`. This particular keychain is mounted from an external drive and may have been in an older format. It had a `.keychain` file extension instead of `.keychain-db`. The keychains in `~/Library/Keychains` all had the newer file extension `.keychain-db`. Regardless, I'm really glad I had good backups.


It is also conceivable that this issue was caused by the Safari update rather than the Catalina update. I took them at the same time.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Website passwords in keychains deleted after Catalina update

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.