Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Would be nice to see a list of current supported sites and apps.

I’m sure there’ll be a story in the App Store listing apps compatible with Sign in with Apple.

As of now, with the deadline far off in 2020, there are probably too few apps to create a list.
 
If someone wants to try “Sign in with Apple”, you can check my app Parcel. Right now it works in iOS, watchOS and web. The web app requires premium version though. The Mac app will be updated soon.
I just tried and I keep getting the following error, any ideas why?
Disregard, I was trying to sign-in but I guess I had to register first.
 
Last edited:
I think Sign in with Apple is a step in the wrong direction. While I consider Apple to be a good company I don't:

1. want any company to know what services I am using
2. want to place my login credentials in an internet service
3. make a single point (this Apple service) a so prominent target to be attacked

Since there are already (better) alternatives like FIDO2 (see Heise Security) that replace passwords with a pair of public/private encryption keys - even with the possibility to store the private key in a password manager app, I don't like this service at all.
Maybe it was driven by the intend to bind customers to the platform, what is understandable but not so good in the end.
Well... you have to meet one basic requirement, and that is the solution must be realistically accessible to the general public. Not only does that mean it must be technically discernible, whatever company/organization offers the solution must also be ubiquitous enough that the service is adopted and trusted. I'd add that the offering entity ought to be one which will stick around, as credentials will be tied to the service being offered, and one not likely to be acquired later by an entity dedicated to data collection and resale/advertising.

Authenticating through individual services directly is certainly the old-fashioned solution which doesn't tie credentials in any capacity to a ubiquitous company, but it is far, far less secure in terms of security (the breach example you gave) than authenticating through any of these services.

I disagree on the fundamental point and am quite glad that Apple is hopping into this game. My reason is that the other companies offering this service are also companies which are interested in data collection and advertising. They are not interested in our privacy. Apple, however, will genuinely endeavor to secure and privatize this connection not just relative to these other entities, but compared to authentication with an individual entity through the traditional means, and that's what I'm looking for. Any of these services are also far, far less likely to be meaningfully breached than accounts with individual entities.

Another benefit to these services is there are fewer credentials out in the wild to manage. For someone who is technically competent a password-managing services like 1Password is adequate, but "Sign in With Apple" (and "Sign in with Google" or "Sign in With Facebook" is much more convenient and easier to remember.

There's not much of an upside for entities which are invested in customer data collection to use "Sign in With Apple" for these privacy-related reasons, which is where the condition of inclusion (restrictions noted) for release into the App Store is going to come into play.

Knowing you're an apple user is another data point to build a unique profile to track you.
This is wildly nonsensical. It sounds more as though you're trying to disparage this service rather than subject it to any degree of critical thought.

Any of the other data collection services can trivially identify if someone is accessing their service on an Apple device. This data is exposed simply by interacting with an app or website. Whereas obfuscating a wide array of far less trivially obtained data points is a solid benefit to considering "Sign in With Apple" over other "Sign in" options from companies interested in data collection, as well as providing the information which would be obfuscated with "Sign in With Apple" directly to a company.
 
Last edited:
"In an app that supports Sign in with Apple" Is the operative here.

Why would apps support a feature that hides your email ?
They will be required to either support sign in with apple if they want to continue supporting their other options such as sign in with facebook, twitter, google, etc. or stop supporting all of them and do the basic username and password only.
 
Would be nice to see a list of current supported sites and apps.
Agreed. It’s pretty hard to find them. As for websites, I suspect not many will offer the option to sign in with apple, since there’s no way Apple can require them to do so like they can require app developers.
 
This is a pretty awesome feature Apple came up with, but idk why developers would want to implement it when it means that they won’t be getting your personal info anymore. Doesn’t really make any sense... in that sense.
App developers will be required to implement it if they already support other quick sign in options such as facebook, twitter or google. Or they will have to stop supporting quick sign in altogether and just do the basic username and password sign in if they refuse to offer sign in with apple.
 
I'm reminded when Amazon would show higher prices to Safari users. It isn't that anonymous when the websites will know you are an apple user.

Websites have been able to do that long before this service came along. Even if you were using Chrome, you would still show up as Chrome on a mac in the user agent. Wherever you need a browser or app the website always know what device you are using.
 
  • Like
Reactions: Jsameds and mudflap
Lots of questions but an awesome feature conceptually. Solve a good many of the negative login issues and the benefit of more privacy. Will give this option a very serious look.
 
  • Like
Reactions: mudflap
I used the service to sign into the Kayak app - it was intuitive, easy, seamless, and quick.

It would be nice if the MacRumors contests used this. Gleam is one of only two things I use Facebook login for (Pokémon Go being the other).
 
Knowing you're an apple user is another data point to build a unique profile to track you.
So, given that you seem to know everything, even what Apple execs are thinking and why, I'm surprised you don't know about "device fingerprinting". Anyone, on any hardware, OS, and browser combination, will be identified as such as soon as they visit a Web site that wants to know those particulars. How you sign in, if that is even required by the Web site, has *nothing* to do with the site knowing you're an Apple user or otherwise. But you just revel in pissing on other people's parade, so these are wasted words, I'm sure.
 
  • Like
Reactions: bkaus
i will need to understand more about the process to recover account id and associated passwords before i go anywhere near this.
with "traditional" Sign in with... methods such as using google, its clear that the email address associated with that account is known to all parties and is a constant.
if the email address used with apple sign in can be dynamic, etc, i need to understand how and where this info is accessible or at least usable by me when i need to recover a site's id or associated password.
i am only saying that i need to really understand this, not that's its not possible or able to be understood, but i need to really understand it and become comfortable with it before i use it.
sites and apps change their log in page address and methods frequently enough that i already encounter problems when this happens right now while i am using safari to automatically enter id and passwords based on web address.
 
Last edited:
  • Like
Reactions: Commodore 64
i will need to understand more about the process to recover account id and associated passwords before i go anywhere near this.
with "traditional" Sign in with... methods such as using google, its clear that the email address associated with that account is known to all parties and is a constant.
if the email address used with apple sign in can be dynamic, etc, i need to understand how and where this info is accessible or at least usable by me when i need to recover a site's id or associated password.
i am only saying that i need to really understand this, not that's its not possible or able to be understood, but i need to really understand it and become comfortable with it before i use it.
sites and apps change their log in page address and methods frequently enough that i already encounter problems with this happens and i am using safari to automatically enter id and passwords based on web address.
That information (the dynamic email address) is accesible in settings>your name>password & security>apps using your Apple ID, where you will find a list of all the websites or apps where you’ve used sign in with apple along with the fake email address associated with each of them.
 
That information (the dynamic email address) is accesible in settings>your name>password & security>apps using your Apple ID, where you will find a list of all the websites or apps where you’ve used sign in with apple along with the fake email address associated with each of them.

thanks. appreciate your info.

i assume that since there is no tab or mention in Password & Security of Apps right now, that it just will appear after i actually create such an account (typical of apple...)

question, i assume this is not just an iOS thing?
does macOS Catalina also use this same system?
so if i don't have my iPhone with me i can still sign in to a site on my mac?
maybe Keychain syncs this sign in info?
 
thanks. appreciate your info.

i assume that since there is no tab or mention in Password & Security of Apps right now, that it just will appear after i actually create such an account (typical of apple...)

question, i assume this is not just an iOS thing?
does macOS Catalina also use this same system?
so if i don't have my iPhone with me i can still sign in to a site on my mac?
maybe Keychain syncs this sign in info?
Right, the 'apps using your Apple ID' tab only show up after you use sing in with apple for the first time. and so does 'Forward To' under settings>your name>Name, Phone Numbers, Email. And sign in with Apple is not iOS exclusive. It is associated with your Apple ID so the feature is available even when logging on to a supporting website or app from a non-apple device/OS.
 
Right, the 'apps using your Apple ID' tab only show up after you use sing in with apple for the first time. and so does 'Forward To' under settings>your name>Name, Phone Numbers, Email. And sign in with Apple is not iOS exclusive. It is associated with your Apple ID so the feature is available even when logging on to a supporting website or app from a non-apple device/OS.
Weird. I see the ‘apps using your Apple ID’ after using it today but there is no trace of ‘Forward To’ under settings>your name>Name, Phone Numbers, Email.
 
I just tried and I keep getting the following error, any ideas why?
Disregard, I was trying to sign-in but I guess I had to register first.
In iOS 13 beta 1 and beta 2 developers could use "Sign up with Apple" button when needed to avoid possible confusion. Later for some reason they removed it.
 
Last edited:
  • Like
Reactions: ATC
So does this completely circumvent a password manager like 1 Password or LastPass? I just tested it on the Parcel app and it never prompted for it to save anywhere. I logged out, tried to login and it gave the option to login with Apple Login.
 
  • Like
Reactions: jpn
Are you saying that the developers have to pay google and Facebook to use the sign in service? Thought that was free. More reason not to use it, if true

Nope, I’m not saying that anyone have to pay. But with the scandals lately on data collection for reselling I wonder if a lot of companies could potentially loose revenue when people get more concerned about privacy and data collection gets more difficult. And if so, will they loose so much that those free (data collecting) services will eventually become paid services? Or will they get even more aggressive collecting and selling user info and ads?
 
  • Like
Reactions: jpn
I block lots of stuff, including sign on with Google/Facebook amongst others, hope to find out how to unblock the sign on with Apple though, I trust them much more than the above mentioned ones.

I think Sign in with Apple is a step in the wrong direction. While I consider Apple to be a good company I don't:

1. want any company to know what services I am using
2. want to place my login credentials in an internet service
3. make a single point (this Apple service) a so prominent target to be attacked

Since there are already (better) alternatives like FIDO2 (see Heise Security) that replace passwords with a pair of public/private encryption keys - even with the possibility to store the private key in a password manager app, I don't like this service at all.
Maybe it was driven by the intend to bind customers to the platform, what is understandable but not so good in the end.

While I appreciate your post it's a good Idea to mention the site is in German.

Would be nice to see a list of current supported sites and apps.

Mmm...first, do you think MR knows which Apps support this, only Apple knows, second, all sites that have sign on with others like Google/Facebook/Twitter work with Apple, so literally thousands if not 10-100's thousands.
 
  • Like
Reactions: goobot and jpn
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.