Funnelhead

Q: Protecting keychain on a work computer

Hi, I haven't been able to find an answer to this, so I'm going to ask: I have my personal keychain linked on my work computer. The problem is you can access my personal keychain using the system password on my laptop, as opposed to my actual iCloud password. That means our IT person could conceivably access highly sensitive passwords like bank accounts & such. I want to make it so that my iCloud keychain is only accessible by using that password, not a laptop system password. Any suggestions? Thank you!

MacBook Pro 2.8 GHz Intel Core 2 Duo, Mac OS X (10.6.4)

Posted on Oct 2, 2016 7:29 PM

Close

Q: Protecting keychain on a work computer

  • All replies
  • Helpful answers

  • by Meg St._Clair,Helpful

    Meg St._Clair Meg St._Clair Oct 3, 2016 2:44 PM in response to Funnelhead
    Level 9 (59,500 points)
    iPhone
    Oct 3, 2016 2:44 PM in response to Funnelhead

    This isn't exactly an answer to your question but, it's the best advice I have under the circumstances. Never, ever keep anything on a company device that you don't want your company to have access to. In most cases, they have a legal right to everything on the device. You generally have no expectation of privacy on a company owned computer. My company has fired people for data they considered inappropriate on company owned phones. Delete your Keychain data from the company computer if you want to keep in private.

  • by LACAllen,

    LACAllen LACAllen Oct 2, 2016 8:10 PM in response to Funnelhead
    Level 5 (5,408 points)
    iCloud
    Oct 2, 2016 8:10 PM in response to Funnelhead

    So, you must be signed in to your personal Apple ID on a work computer. In most companies, using your own account on a work computer is a violation of IT/Security policy.

     

    You can deselect Keychain in iCloud preferences to avoid it being stored on that computer entirely.

     

    As Meg points out, it is their machine.

     

    Having said that, it appears you can have a unique password for your keychain access app that is not revealed to an admin. I've never done this, but here are the details.

     

    Screen Shot 2016-10-02 at 11.08.31 PM.png

  • by Funnelhead,

    Funnelhead Funnelhead Oct 3, 2016 2:44 PM in response to Meg St._Clair
    Level 1 (4 points)
    iCloud
    Oct 3, 2016 2:44 PM in response to Meg St._Clair

    I don't work for a typical company, but that's a fair point. Thanks.

  • by Meg St._Clair,

    Meg St._Clair Meg St._Clair Oct 3, 2016 4:27 PM in response to Funnelhead
    Level 9 (59,500 points)
    iPhone
    Oct 3, 2016 4:27 PM in response to Funnelhead

    Funnelhead wrote:

     

    I don't work for a typical company, but that's a fair point. Thanks.

    If both you and your company are ok with keeping your Keychain on your work computer, then LACAllen's advice is probably the way to go.

     

    Best of luck!