Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Keychain Access - Easiest way to move data to new machine?

I employ Keychain Access to store all my web site passwords, secure notes and various hardware logins (router etc) on my iMac.


From within the utility it appears not to allow any form of exporting so was wondering what is the best way to get all the information contained within Keychains on one machine to another when I upgrade to a faster unit.


I believe enabling iCloud Keychain on both machines could be one method but I've so far not triggered this option because I don't currently require this info on my iDevices plus not happy with it being in the cloud.


Another method be it back in Snow Leopard days was to set the new machine up with the same user name and password then with Finder just copy the Keychain folder - but I suspect that now the OS is more complicated with continuity etc that would create more problems than it solves.


A third could be to use Migration Assistant (machine to machine via thunderbolt) but having never used before I am not sure what info it would transfer and would prefer to control that process as much as possible (only want to move Keychain data).


A four could be Time Machine but suspect that would work similarly to Migration Assistant.


Could anyone that's moved specific data from one machine to another expand on the above thoughts and possibly give any pros/cons taking into account I would first set the new machine up by just giving it my iCloud password to enable things like Calendar, Contacts, iMessages, FaceTime etc to get started - Mail account would be added afresh importing all my old messages from mbox backups.


Thanks in advance.

iMac (21.5-inch, Late 2013), macOS Sierra (10.12.3)

Posted on Feb 26, 2017 1:50 PM

Reply
Question marked as Best reply

Posted on Feb 26, 2017 11:48 PM

There is a section in Keychain Access Help entitled "Copy keychains to another Mac" it says:


[...] To manually move your keychains to another Mac, you can copy your keychain file to the other computer and import it with Keychain Access. To copy only some keychains and not all, see Import and export keychain items.

Important: Be sure not to leave your keychain on a computer that is not secure. Doing so may allow other users to access items with your keychain.

In the Finder, locate the keychain files you want to transfer. Keychains are usually located in the Keychains folder in the Library folder in your home folder.

Hold down the Option key and choose Go > Library, then open the Keychains folder.

Transfer your keychains to the other Mac by copying the keychain files.

Important: Transfer your keychain in a safe manner where no unauthorized person can access it. For example, use AirDrop or a USB flash drive to copy the files. [...]


C.

12 replies
Question marked as Best reply

Feb 26, 2017 11:48 PM in response to SiHancox

There is a section in Keychain Access Help entitled "Copy keychains to another Mac" it says:


[...] To manually move your keychains to another Mac, you can copy your keychain file to the other computer and import it with Keychain Access. To copy only some keychains and not all, see Import and export keychain items.

Important: Be sure not to leave your keychain on a computer that is not secure. Doing so may allow other users to access items with your keychain.

In the Finder, locate the keychain files you want to transfer. Keychains are usually located in the Keychains folder in the Library folder in your home folder.

Hold down the Option key and choose Go > Library, then open the Keychains folder.

Transfer your keychains to the other Mac by copying the keychain files.

Important: Transfer your keychain in a safe manner where no unauthorized person can access it. For example, use AirDrop or a USB flash drive to copy the files. [...]


C.

Feb 27, 2017 12:56 AM in response to cdhw

Thanks, have to admit did not check the help section - bit obvious really, but on further reading still not clear on how it helps me without bringing over duplicates.


If when starting the new machine I complete all the requested sign ins (Apple ID etc) it should then create all the necessary keychains to operate Apple services (the Application Passwords and Certificates for example) - that leaves only my 59 Secure Notes and 55 Web Form Passwords to get across (forget any third party apps, will treat similar to Mail and do things manually).


Now if I go into Keychain Access and try to Export either of those categories I get the dimmed menu (as warned about under Help) - so that leaves only the option to copy over the Keychain folder and then with File menu select "Add Keychain". My concern is that it will bring over all the old keychain items and as said previously I would really like to be more specific - will the "Added Keychain" be kept separate (i.e. not merged and be given a unique name) so I can then select items from it and move them over to the existing Login or Local Items.


Not knowing how this process works in advance is making me a little cautious, has any one actually used this method of copying over the whole Keychain Folder then using the "Add Keychain" option, selected only a few specific keys, moved them to a new location and then deleted the rest of the previously added keychain to basically leave you with the new Keychain setup but containing the specific items required from the old.

Feb 27, 2017 2:01 AM in response to Lexiepex

Not normally - but my original question was to canvas ideas on what people consider is my best approach - before I actually jump in and do it.


I would like to control the process as much as possible avoiding the automated methods because of the wish to only move over specific keys - it's basically the user created ones I'm interested in getting onto the new mac.


I find it strange that those (Secure Notes and Web Form Password) seem to get the dimmed export option compared to system created ones like iMessage Encryption which are allowed.


The other reason for my wish to move just specific keys is to avoid any possibility of creating duplicates on the system side - I would not want any Apple/iCloud Authentication keys to be either replaced or duplicated on the new machine - but not fully understanding either the Keychain process or how Migration works is probably causing a lot of my uncertainty.

Feb 27, 2017 2:21 AM in response to SiHancox

You mean that you want to the transtion to a new mac as clean as possible:

Install the non-Apple apps by copying/downloading the installers to the new mac and then install them. Copy all user data (Libraries, documents etc) to the new mac. Then you have to do all settings for the mac and all apps by hand and you have a brandnew system. The settings and passwords for Mail for example will go into KeychainAcces and nothing of the old machine comes into it.

More work like this, but nothing old comes over.

Connect a new TM disk to TM and start everything as you have a new machine.

Feb 27, 2017 6:04 AM in response to Lexiepex

Yes, basically as you say - I've all my docs backed up to external disc and I don't mind installing third party apps from scratch (gives me the chance to only put the ones on that I really require now). With the Apple ID sign-in being part of the initial start up most of the work will be done, it's getting the last bit of info over - namely secure notes and web passwords that if done from scratch will be the time consuming bit (to visit every site and enter passwords each time), would just like method that moves them over but nothing else. I will then have as clean a setup as possible 😉

Feb 27, 2017 6:26 AM in response to Lexiepex

Thanks, but I think you are missing my point (I'm probably not making it clear) - I've never used the File - Add Keychain option before and was hoping someone that has could give a little more info and possibly talk through the process - especially the part regarding moving over just the keys required and then disregarding the rest to leave just the newly setup Keychain with only those chosen additional keys extra.

Feb 27, 2017 7:08 AM in response to Lexiepex

A clean install with the exception of getting the 120 secure notes and web form passwords carried over from my "old" setup! Secure notes are user created and should not conflict with anything else setup under the new system, likewise web form passwords if moved over should just mean that when visiting a secure web site the password info will already be available and there not require the user to re-enter.


It's the process of getting those 120 keys moved over that I'm now asking advice on - because in moving them over I would ideally like to avoid bringing anything else with them!


Thanks for spending time on this discussion though.

Feb 27, 2017 11:23 AM in response to SiHancox

Assuming your notes are in the login keychain. Make sure you are properly backed up. On your old Mac, hold down 'opt' and use


Finder > Go > Library


to locate and then copy the Keychains folder onto the desktop of your new Mac and rename it Old Keychains. Rename the two login files it contains:


OLD_login.keychain

OLD_login.keychain-db


On your new Mac:


Keychain Utility > File > Add Keychain...


and chose OLD_login.keychain. You will see that this is now listed with your other keychains. Select the notes you want to preserve and then drag them to your new login keychain, which will be in bold. Verify that they are now in your login keychain. Select the OLD_login keychain and delete it using


Keychain Utility > File > Delete Keychain "OLD_login"


C.

Feb 27, 2017 11:23 AM in response to cdhw

Thank you, was wondering if the "old keychain" could be renamed before adding to avoid getting it mixed up with the "new keychain" already in Keychain Access (Apple talk about renaming the keychain already inside Keychain Access first before adding the old - but was concerned that might not be able to be undone).


Secure Notes are contained in Login and the Web Form in Local Items, so if following the above procedure (and your suggestion) will have to copy both pairs, renaming them "old" prior to "adding" - only small issue, can't find Local Items (doesn't appear in Keychain folder - unless it's contained inside the 32 digit coded name folder?).


That leaves the option of moving the Web Form ones to Login first, copy the Login to the new Mac (then move Web Forms back to Local Items on old machine) - rename Local to old and add, then move the secure notes and web forms to the respective new keychains.


Unless anyone can tell on the location of Local Items Keychain within the Finder the above might be my best method - unless I create a completely new Keychain, copy both secure notes and web forms to that prior to moving onto new machine (but will the new Keychain appear inside the Keychain folder?).


I'm doing more reading on the subject but a way forward looks possible, just want to be sure prior to jumping in - thanks again for the input.

Keychain Access - Easiest way to move data to new machine?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.