iCloud app data backups - store passwords?

Discussion in 'Apple Music, Apple Pay, iCloud, Apple Services' started by Retired Cat, Jun 20, 2013.

  1. Retired Cat macrumors 65816

    Joined:
    Jun 12, 2013
    #1
    Suppose I have a third party app that needs a username & password to log in, like New York Times for iOS.

    When I back up the data from this app to iCloud, is the password included in the saved data?

    In the unlikely event that my iCloud account is hijacked, I don't want someone restoring my app data and stealing my passwords.
     
  2. Rigby macrumors 601

    Joined:
    Aug 5, 2008
    Location:
    San Jose, CA
    #2
    It depends on how the app stores its password. If it is stored in the device's keychain as intended by Apple, then it cannot be recovered from an iCloud backup on a different device (because the keychain is encrypted using a hardware key that is unique to the original device). If the app (stupidly) stores the password in unprotected app storage, it may be possible to extract it.

    Most apps (including all the standard Apple apps) use the keychain for passwords these days though.
     
  3. Retired Cat thread starter macrumors 65816

    Joined:
    Jun 12, 2013
    #3
    Thanks for the info. I feel better knowing that there is encryption tied to each specific iPhone.
     

Share This Page