|Nov 27, 2012, 09:27 AM||#1|
I've been using the keychain in Safari on the Mac and a couple of security questions came to mind.
I used an iMac at work with a work login and used Safari to login to various sites. When I got home I used my MacBook and checked the keychain in Safari. Somehow all the passwords I used on the work iMac (including some colleagues' logins) were available to see in my MacBook keychain. Clicking on 'Show Password' showed all the passwords in plain view (including colleagues' passwords who had used the same computer previously).
How did the keychain get transferred from the work iMac to my home MacBook Pro?
Since then I've used another iMac at a different work place (so a completely different OS login) and the same keychain also transferred to this Safari. So anyone else using this iMac can view the passwords in plain view in Safari preferences.
Please could someone shed some light into this.. It seems odd that my keychain could just float around to every Mac I use and anyone can view the accumulated login details if they know the computer's login. I would think this can be a problem on shared computers in an office.
Last edited by Qlosure; Nov 27, 2012 at 09:35 AM.
|Nov 27, 2012, 11:08 AM||#2|
I have no idea how your keychain/passwords are getting synced as that is not a feature available in OS X. Could it be there is an aftermarket product like 1Password or something syncing the passwords?
When you say you can see your passwords, are you talking about this screen in Safari prefs? If you uncheck the box I marked, the passwords will not be shown. If you recheck the box you will be prompted for a password.
|Nov 30, 2012, 10:38 AM||#3|
I'm probably getting muddled between keychain and safari passwords.
Yes that's the screen I was referring to. Somehow this list of websites and passwords has been transferred to every Safari I've been working on. Even when I cleared the list from my MacBook, it came back.. so I'm guessing the list is stored in a cloud/server somewhere.
My question is: how do I stop this list from being transferred from browser to browser?
My concern is that anyone who has the password of that machine's login can enter the password and view all my website passwords.
Also, my work colleagues' passwords (who briefly used the same office Mac) have been included in that list, which gets transferred to every Safari I use.
|Thread Tools||Search this Thread|
|thread||Thread Starter||Forum||Replies||Last Post|
|iCloud Keychain / Keychain Access Question||amnichols10||OS X Mavericks (10.9)||2||Apr 23, 2014 06:10 PM|
|Keychain has just made all my passwords open! How is iCloud keychain meant to work?||mpt-matthew||iOS 7||16||Apr 23, 2014 03:29 PM|
|Chinese Security Team Exploits Safari Security Flaw at PWN2OWN||MacRumors||Mac Blog Discussion||30||Mar 17, 2014 01:12 PM|
|iCloud Keychain problems after deleting Keychain Access||bkribbs||OS X Mavericks (10.9)||0||Nov 19, 2013 09:45 PM|
|Security Researchers Detail New Combination of Touch ID and iOS 7 Security Feature Bypasses||MacRumors||iOS Blog Discussion||66||Oct 7, 2013 07:49 PM|
All times are GMT -5. The time now is 01:24 AM.