Apple: We'll save your passwords even if you don't want to

CarderPlanet

Professional
Messages
2,552
Reaction score
673
Points
83
Researchers have identified abnormal behavior of the Keychain function after a recent update.

Cybersecurity experts have identified several potential issues with the iCloud Keychain feature in iOS 17 and macOS Sonoma.
  • When you update your device, the iCloud Keychain feature can be activated automatically, even if it was previously disabled.
  • If the feature was enabled and then the user disables it, additional questions arise about saving data.

The iCloud Keychain feature was introduced in iOS 7 and OS X Mavericks. This is a feature that stores passwords and bank card data in iCloud, making them available on all Apple devices. All information is encrypted using end-to-end encryption, and even Apple doesn't have access to the user's credentials or payment details.

Researchers from the company Mysk reported that some users who did not use iCloud Keychain, after the update, this function was activated independently.

Users who have upgraded to iOS 17, iPadOS 17, or macOS Sonoma and have not previously synced Passwords and Keys with iCloud should check their settings and make sure Keychain is turned off.

If you disable the iCloud Keychain feature, your data may remain on Apple's servers. According to the company's data:
  • If a user logs out of an iCloud account with iCloud Keychain enabled, they are prompted to save or delete the Keychain information.
  • Previously, it was possible to forcibly delete data from iCloud servers, but now this process can be associated with the new "Family Passwords" feature, which allows you to share credentials with trusted contacts.

All users are advised to pay attention to their device settings after the update and ensure that their data is stored in the cloud. Whether this is a mistake, or Apple for some reason deliberately decided to activate Keychain for all its users is still unknown.
 
Top