Website passwords in keychains deleted after Catalina update

After upgrading to Catalina, the website passwords -- but not app passwords, secure notes, certs, or keys -- were deleted from all keychains in `~/Library/Keychains`. Keychains stored elsewhere were not affected.


I use different keychain files for different purposes (personal, work, etc.). Many but not all of these are stored in `~/Library/Keychains`. I can see in the filesystem modification time that all the keychains in there were updated as of the time I upgraded to Catalina although many of these keychains haven't been unlocked in months. It seems there must have been some process as part of the upgrade that deleted things.


I ran the unix utility `strings` on the keychains which usually can reveal the names of items in a keychain database file. Unfortunately, it looks like the passwords in question have been completely deleted.


Notes:

  • MacOS Catalina 10.15
  • MacBook Pro (Retina, Mid 2012)
  • Safari Version 13.0.2
  • iCloud *not* used to sync the keychain


Possibly related: https://discussions.apple.com/thread/250700942

MacBook Pro

Posted on Oct 9, 2019 4:08 PM

Reply

Similar questions

17 replies

Oct 26, 2019 5:25 PM in response to davidfischer

It gets worse... Catalina will delete the web passwords from your keychain more than once. It happened to me on the initial upgrade, and it continues to happen when I reboot, wake from sleep, and sometimes just idling. It will purge any Internet keychain entry on a regular basis.


The problem affects one file: ~/Library/Keychains/login.keychain-db. This is where the passwords are being wiped out. If you do not keep a backup of this file on disc or in the cloud, then there is no recovery and Catalina will regularly continue to delete your Internet passwords.


A temporary fix is to make a copy of this file every time you update it, for use as a replacement the next time you lose your passwords. It is also entirely possible that enabling iCloud keychains will make this problem go away. I do not put my passwords in the cloud so I have not tested this. Catalina just might assume everyone wants to use iCloud.


Possible causes that come to mind:

• Catalina just doesn't like Internet passwords in the keychain - there's not even an Internet category filter anymore

• Safari, where I have no passwords stored, is thinking that's the correct state so passwords in the keychain need to be removed

• iCloud, where I have no passwords stored, is thinking that's the correct state so passwords in the keychain need to be removed, and it's ignoring the fact that I do not have iCloud keychains enabled and editing the database anyway


Keychain Access used to have a First Aid option to repair its data. Anyone know what happened to that feature? May not be relevant since they changed storage formats from .keychain to .keychain-db.


Apple support pretty much just told me you need to restore from a backup or use iCloud. I won't get into the incompatibility between Catalina and Mojave when it comes to Time Machine... But they did acknowledge that the developers need to look at this at least. Apple, I hope you can find the solution! Keychain has worked amazingly well for me for years, I'd rather it continued to work than switch to a third party. Without being forced to use iCloud, please.

Feb 1, 2020 1:55 AM in response to moi160

Catalina 10.15.3 has just been released but does not fix the bug.


Despite many discussions on the forums dealing with this problem, Apple remains deaf.

I contacted Apple support and opened a complaint file;

I contacted Apple product security and provided the information;

I contacted Apple Feedback assistant and opened a comment;

What else can i do?


I have received no response from Apple, not even information that the problem is under investigation. It is serious, very serious, not to be able to guarantee the security of personal data and worse to seem to ignore it!

APPLE DO YOU HEAR THIS?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Website passwords in keychains deleted after Catalina update

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.