Apple Keychain as a Password Manager? about awesome-privacy HOT 5 CLOSED

@Gregor-Davies ...do you have any supporting research that Apple can read the passwords? I don't know that that is true.

from awesome-privacy.

Well, Apple has famously opposed an FBI attempt to break into a phone. But the passwords can still be read by apple so it's really up to whether you trust apple.

from awesome-privacy.

But the passwords can still be read by apple so it's really up to whether you trust apple.

Apple claims that the passwords are end-to-end encrypted.
https://support.apple.com/en-us/HT202303

from awesome-privacy.

Here's some recent keychain hacks in the news.

https://www.wired.com/story/keysteal-apple-keychain-attack-shenanigans/

It uses the same password as your mac so if your macs hacked your passwords can be stolen

https://www.laptopmag.com/articles/mac-keychain-hack

Although the passwords are encrypted in keychain, backups of devices stored in iCloud still store the private keys to access them (https://www.reddit.com/r/apple/comments/a0bufd/how_secure_is_the_icloud_keychain_really/)

from awesome-privacy.

@aiquiral It's important to note that end-to-end encryption doesn't mean the person who made the service doesn't keep their own key for being able to decrypt the data on their side. It may prevent your ISP from snooping, but won't prevent Apple from doing it if they choose to.

from awesome-privacy.