Go Back   MacRumors Forums > Apple Systems and Services > OS X

Thread Tools Search this Thread Display Modes
Old Nov 27, 2012, 09:27 AM   #1
macrumors newbie
Join Date: Nov 2012
Keychain security

Hi all,

I've been using the keychain in Safari on the Mac and a couple of security questions came to mind.

I used an iMac at work with a work login and used Safari to login to various sites. When I got home I used my MacBook and checked the keychain in Safari. Somehow all the passwords I used on the work iMac (including some colleagues' logins) were available to see in my MacBook keychain. Clicking on 'Show Password' showed all the passwords in plain view (including colleagues' passwords who had used the same computer previously).

How did the keychain get transferred from the work iMac to my home MacBook Pro?

Since then I've used another iMac at a different work place (so a completely different OS login) and the same keychain also transferred to this Safari. So anyone else using this iMac can view the passwords in plain view in Safari preferences.

Please could someone shed some light into this.. It seems odd that my keychain could just float around to every Mac I use and anyone can view the accumulated login details if they know the computer's login. I would think this can be a problem on shared computers in an office.

Last edited by Qlosure; Nov 27, 2012 at 09:35 AM.
Qlosure is offline   0 Reply With Quote
Old Nov 27, 2012, 11:08 AM   #2
Weaselboy's Avatar
Join Date: Jan 2005
Location: California
I have no idea how your keychain/passwords are getting synced as that is not a feature available in OS X. Could it be there is an aftermarket product like 1Password or something syncing the passwords?

When you say you can see your passwords, are you talking about this screen in Safari prefs? If you uncheck the box I marked, the passwords will not be shown. If you recheck the box you will be prompted for a password.

Thumb resize.
Weaselboy is offline   0 Reply With Quote
Old Nov 30, 2012, 10:38 AM   #3
Thread Starter
macrumors newbie
Join Date: Nov 2012
I'm probably getting muddled between keychain and safari passwords.

Yes that's the screen I was referring to. Somehow this list of websites and passwords has been transferred to every Safari I've been working on. Even when I cleared the list from my MacBook, it came back.. so I'm guessing the list is stored in a cloud/server somewhere.

My question is: how do I stop this list from being transferred from browser to browser?

My concern is that anyone who has the password of that machine's login can enter the password and view all my website passwords.

Also, my work colleagues' passwords (who briefly used the same office Mac) have been included in that list, which gets transferred to every Safari I use.
Qlosure is offline   0 Reply With Quote

MacRumors Forums > Apple Systems and Services > OS X

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
iCloud Keychain / Keychain Access Question amnichols10 OS X Mavericks (10.9) 2 Apr 23, 2014 06:10 PM
Keychain has just made all my passwords open! How is iCloud keychain meant to work? mpt-matthew iOS 7 16 Apr 23, 2014 03:29 PM
Chinese Security Team Exploits Safari Security Flaw at PWN2OWN MacRumors Mac Blog Discussion 30 Mar 17, 2014 01:12 PM
iCloud Keychain problems after deleting Keychain Access bkribbs OS X Mavericks (10.9) 0 Nov 19, 2013 09:45 PM
Security Researchers Detail New Combination of Touch ID and iOS 7 Security Feature Bypasses MacRumors iOS Blog Discussion 66 Oct 7, 2013 07:49 PM

Forum Jump

All times are GMT -5. The time now is 01:24 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2015, MacRumors.com, LLC