iCloud Keychain: What It Does, How to Set It Up and Where Passwords Live Now

Before you switch it on, Apple says your devices should be on the latest software and your Apple Account needs two-factor authentication. The part worth knowing is what happens if you ever sign out of iCloud. Keep the information when asked and your passwords stay on that device, but stop updating when you change them elsewhere. Don't keep it and they're gone from that device, though an encrypted copy stays on iCloud servers and syncs back if you turn iCloud Keychain on again.

What iCloud Keychain fills in for you

• Usernames, passwords and passkeys for Safari and apps
• Credit card information and security codes
• Wi-Fi passwords
• Verification codes, which also live in the Passwords app

It works on any device you approve, and it protects your data with end-to-end encryption. The key is made from information unique to your device combined with your device passcode, so Apple says no one else can read it, in transit or in storage.

How to turn on iCloud Keychain on iPhone

1. Open the Settings app, tap your name, then tap iCloud.
2. Under Saved to iCloud, tap Passwords. In iOS 17 or earlier, tap Passwords and Keychain.
3. Tap Sync this iPhone to turn on iCloud Passwords & Keychain. You might need to enter your passcode or Apple Account password.

How to turn on iCloud Keychain on a Mac

1. From the Apple menu, choose System Settings.
2. Click your name, then click iCloud.
3. Click Passwords. In macOS Sonoma or earlier, click Passwords & Keychain.
4. Click Sync this Mac, then click Done.

If you chose Approve Later when you signed in to your Apple Account, you'll need to approve with an old passcode or from another device when prompted. If you can't, you'll be asked to reset your end-to-end encrypted data.

Where your passwords live now

The Passwords app holds all your passwords, passkeys and verification codes in one place, on every device signed in to the same Apple Account with Passwords & Keychain turned on in iCloud settings. If you use AutoFill to sign in to websites and apps, those passwords appear in Passwords automatically. Find one by sorting or searching, then tap Edit to reveal, change or delete it.

Fix weak or compromised passwords

For passwords you create yourself, iPhone flags common weaknesses, like ones that are easily guessed or used more than once. It can also monitor your passwords and alert you if they show up in known data leaks. To control that, go to Settings, tap Apps, tap Passwords and turn Detect Compromised Passwords on or off.

1. Open the Passwords app and tap Security.
2. Tap an account with a warning. A message explains the problem.
3. Tap the Password field, then tap Copy Password, so you can paste it if the site asks for your old one.
4. Tap Change Password, then change it on the website or in the app.

If the site offers a passkey or Sign in with Apple, take it. If not, many accounts let your iPhone create a strong password you don't have to remember. For a warning about a site that no longer exists, tap All in Passwords and swipe left on the account to remove it. And if you can't fix one, tap the account and tap Hide so it stops nagging you.

Share passwords with family

Shared password groups let you share passwords, passkeys and Sign in with Apple credentials with family and people you trust. Anyone in the group can add to it, and when a shared password changes, it changes on everyone's device. The people you add must be in your contacts and have an iPhone, iPad or Mac on iOS 17, iPadOS 17, macOS 14 or later. If their name shows in blue, you can add them. In gray, their device might not support it.

1. In the Passwords app, tap the new group button.
2. Enter a name for the group, then tap Add People.
3. Type the name, email address or phone number of each person, then tap Add.
4. Select the passwords you want to share, then tap Move.

Whoever creates the group can add or remove members or delete the group. Everyone else can only leave. Invitations show in Passwords under Group Invitations, and Apple's advice is plain: don't accept one if you don't recognize the sender.

What happens when you delete, leave or switch off

If you	What happens
Delete a password	It sits in Deleted for 30 days before it's permanently removed
Turn off iCloud Keychain	Passwords, passkeys and card details are stored locally on that device
Sign out and keep the information	Passwords stay on the device but don't update from your other devices
Sign out and don't keep it	They're removed from the device, with an encrypted copy kept on iCloud servers
Turn off Keychain or sign out	You lose access to shared password groups, but members keep what you shared

How to recover a deleted password

1. Open the Passwords app and tap Deleted.
2. Tap the account for the deleted password.
3. If you'd shared it with a group, choose Recover to Group to keep sharing, or Recover and Stop Sharing.

The password goes back on your iPhone and into iCloud Keychain.

My verdict

I'd turn iCloud Keychain on if all your devices are Apple, because it does the remembering for you and the Security tab quietly catches reused and leaked passwords. Set up a shared group for the household logins you're always texting each other. Before you sign out of iCloud on any device, decide whether to keep the Keychain data. And if your phone gets passed around, it's worth knowing how to lock individual apps with Face ID too.

Frequently asked questions

What is iCloud Keychain?

It keeps your passwords, passkeys, card details and Wi-Fi passwords up to date across your Apple devices and fills them in for you.

Where do I find iCloud Keychain passwords on iPhone?

In the Passwords app, which holds your passwords, passkeys and verification codes in one place.

Do I need two-factor authentication for iCloud Keychain?

Yes. Apple says two-factor authentication must be enabled for your Apple Account before you turn on iCloud Keychain.

Can I recover a password I deleted from iCloud Keychain?

Yes, within 30 days. Open the Passwords app, tap Deleted and tap the account to recover it.