iCloud Keychain on Mac: Sync Passwords Across Devices

iCloud Keychain is Apple's built-in password manager doing its quiet best impression of not existing: it saves logins, passkeys, Wi-Fi passwords, and payment cards, syncs them end-to-end encrypted across your devices, and autofills them when needed. If you're paying for a password manager out of habit, or worse, reusing passwords — here's how to turn it on and actually use it from the Mac.

Turn it on

1. Open System Settings and click your name at the top of the sidebar.
2. Click iCloud, then Passwords & Keychain (on Sequoia it sits in the Saved to iCloud group — click See All if it's not immediately visible).
3. Turn on syncing for this Mac. You may be asked for your Mac password or another device's passcode — that's the device-trust handshake, not an error, and it's how the encryption keys reach this machine.

Your Apple ID needs two-factor authentication (long mandatory for new setups). Repeat the toggle on your iPhone and iPad (Settings → your name → iCloud → Passwords & Keychain) and every device shares one synced set of credentials. To undo on any device, flip the same switch off — passwords already saved remain in that device's local keychain; they just stop syncing.

Where your passwords actually live now

The interface moved recently, which confuses everyone:

• macOS Sequoia: a dedicated Passwords app (in Applications, unlocks with Touch ID) — search, edit, add notes, see security warnings, manage passkeys and shared groups.
• Ventura and Sonoma: System Settings → Passwords — same data, plainer clothes.
• Everywhere: Safari autofills from it, suggests strong passwords on signup forms, and flags reused or breached passwords under the security recommendations.

Wi-Fi networks, saved cards, and passkeys ride along too — join a network on your iPhone and the Mac knows it; create a passkey on the Mac and your phone can sign in with it. Autofill itself is Safari's side of the bargain: check Safari → Settings → AutoFill has Usernames and passwords ticked if forms aren't offering your logins. And on Sonoma and later, you can create shared password groups — a set of credentials (the family streaming logins, say) synced end-to-end to chosen people, managed from the same Passwords interface.

The security model, in one paragraph

Keychain data is end-to-end encrypted: the keys derive from your device passcodes, not from your Apple ID password, and Apple cannot read the contents — which is why enabling a new device asks you to approve from an existing one or enter an old passcode. It also means the usual warning applies: if you lose all trusted devices and the recovery paths, no support line can decrypt your passwords for you. Keep your account recovery methods (trusted phone number, recovery contact) current — that's the whole maintenance burden.

Is it enough to replace a password manager?

For an all-Apple household, mostly yes: it generates, stores, syncs, autofills, warns about breaches, and does passkeys — free. The honest gaps: Windows and Android access is limited (there's an iCloud Passwords extension for Chrome/Edge on Windows, nothing meaningful on Android), sharing is family-oriented rather than team-oriented, and attachments/secure documents aren't a feature. If your life crosses platforms daily or you share credentials with a team, a dedicated manager still earns its subscription. If not, turn Keychain on and spend the subscription on coffee.

Meet the older sibling

The Mac also ships Keychain Access, the crusty-but-powerful utility that stores certificates, secure notes, and every local secret — occasionally useful when you need to dig out a Wi-Fi password from years ago. Here's how to use it without breaking anything.