iCloud app data backups - store passwords?

Discussion in 'Apple Music, Apple Pay, iCloud, Apple Services' started by Retired Cat, Jun 20, 2013.

  1. Retired Cat macrumors 65816

    Jun 12, 2013
    Suppose I have a third party app that needs a username & password to log in, like New York Times for iOS.

    When I back up the data from this app to iCloud, is the password included in the saved data?

    In the unlikely event that my iCloud account is hijacked, I don't want someone restoring my app data and stealing my passwords.
  2. Rigby macrumors 601

    Aug 5, 2008
    San Jose, CA
    It depends on how the app stores its password. If it is stored in the device's keychain as intended by Apple, then it cannot be recovered from an iCloud backup on a different device (because the keychain is encrypted using a hardware key that is unique to the original device). If the app (stupidly) stores the password in unprotected app storage, it may be possible to extract it.

    Most apps (including all the standard Apple apps) use the keychain for passwords these days though.
  3. Retired Cat thread starter macrumors 65816

    Jun 12, 2013
    Thanks for the info. I feel better knowing that there is encryption tied to each specific iPhone.

Share This Page