Will the MacBook fill the random spaces in a password

A bank account has a long and complicated password, say 20 characters. Every time, you'd have to fill random spaces, some random spaces blocked, for example,

Will MacBook fill the random empty spaces, if the password is saved in it? Every empty box here is a separate entry point.

This will be done through Safari, where Touch ID can be used. I'm not sure, whether Safari or MacBook remembers the password in this case.


It could be that the banks won't allow such random filling of password automatically.

Posted on Feb 15, 2024 11:45 PM

Reply
Question marked as Top-ranking reply

Posted on Feb 16, 2024 12:12 PM

Grant Bennet-Alder wrote:

<< some web browser/device will remember it, and that's supposed to be a security problem. >>

if your Mac remembers it, a password will be added to the browser keychain, and the browser-remembered keychain items are part of a larger encrypted set that are further encrypted when added to the system keychain. That is NOT a high security risk.

If the remembered password cannot fill random spaces as shown in OP, saving it in system keychain is useless. There are few organisations, such as banks that use random spaces to fill to open whatever that's behind it. Giving the full password won't open that encrypted page anyway, you have to fill those random opened spaces with corresponding characters. Every time you try to log in, it will have random spaces open to fill, and it can be any number. Looks like those randomly opened spaces can only be filled by a living person.

5 replies
Question marked as Top-ranking reply

Feb 16, 2024 12:12 PM in response to Grant Bennet-Alder

Grant Bennet-Alder wrote:

<< some web browser/device will remember it, and that's supposed to be a security problem. >>

if your Mac remembers it, a password will be added to the browser keychain, and the browser-remembered keychain items are part of a larger encrypted set that are further encrypted when added to the system keychain. That is NOT a high security risk.

If the remembered password cannot fill random spaces as shown in OP, saving it in system keychain is useless. There are few organisations, such as banks that use random spaces to fill to open whatever that's behind it. Giving the full password won't open that encrypted page anyway, you have to fill those random opened spaces with corresponding characters. Every time you try to log in, it will have random spaces open to fill, and it can be any number. Looks like those randomly opened spaces can only be filled by a living person.

Feb 16, 2024 5:00 AM in response to chdsl

As though passwords weren't complicated enough. No, I don't believe Safari Autofill would be able to cope with that ridiculous requirement.


I've not come across a website that needs it yet. Hopefully I won't. It looks hideous. Apple has definitively stated Passkeys are the future:


Passkeys Overview - Apple Developer

Sign in to an account on your Mac with a passkey - Apple Support


Anything else will eventually be swept into the dustbin of bad computing ideas.

Feb 16, 2024 9:05 AM in response to chdsl

<< some web browser/device will remember it, and that's supposed to be a security problem. >>


if your Mac remembers it, a password will be added to the browser keychain, and the browser-remembered keychain items are part of a larger encrypted set that are further encrypted when added to the system keychain. That is NOT a high security risk.


The alternative is to use individual remembered password unique to each site, because re-using passwords is DEFINITELY a security risk. I can't remember more than a handful, then I get confused. and the ones that are appropriately long are especially difficult for me.


Because Keychain Access securely stores and retrieves your user names, passwords, and other information, you can make individual passwords more complex and difficult to break. This can make your individual accounts more secure.


What is Keychain Access on Mac? - Apple Support


.


Feb 16, 2024 8:08 AM in response to John Galt

John Galt wrote:

I've not come across a website that needs it yet. Hopefully I won't. It looks hideous. Apple has definitively stated Passkeys are the future:

Anything else will eventually be swept into the dustbin of bad computing ideas.

It is not a website "requirement", it is how banks give you an option to fill in randomly open boxes. It is security matter. Of course, one can opt for the whole 20 character password to be inserted, and that Safari/macOS/any other web browser would remember and would insert with Touch ID. But then some web browser/device will remember it, and that's supposed to be a security problem. If browsers, OSs can't fill random slots, then it is great!.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Will the MacBook fill the random spaces in a password

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.