As a public service announcement, I recently discovered that, since OS X 10.9 Mavericks (released 2013), Time Machine's backup of keychains is completely broken

As a public service announcement, I recently discovered that, since OS X 10.9 Mavericks (released 2013), Time Machine's backup of keychains is completely broken for anyone who does not use iCloud Keychain. This bug is actually so completely unacceptable that it was hard for me to believe when I encountered it, but anyone can easily verify this for themself. In particular, your account's Local Items keychain, which is used by Safari and some other Apple applications to store passwords, is encrypted in such a way that it can only be restored onto the exact same machine — knowing the user's password is insufficient. Thus, if your machine is lost, stolen, or damaged, a restore from Time Machine backup will not properly restore your keychain. Nor will the keychain properly migrate to another machine using Migration Assistant (luckily, this is how I discovered this behavior). There is no warning of this behavior in any documentation, and no workaround whatsoever except to use a different browser or password manager, or to manually store all passwords yourself separately in the Login (rather than Local Items) keychain. There's also no way to export the items in the the Local Items keychain except manually copying them to another keychain, during which you must enter your password one-by-one for each copied item (people have written some AppleScripts to automate this, e.g. https://gist.github.com/rmondello/b933231b1fcc83a7db0b https://gist.github.com/rmondello/b933231b1fcc83a7db0b). If you use iCloud Keychain, then the Local Items keychain is just a machine-local cache of the iCloud data, which is fine, I guess. But this behavior is just dangerously broken if you do not use iCloud for this purpose. Some more information on this issue: https://forums.macrumors.com/threads/data-migration-local-keychain-passwords-not-appearing.1905840/ https://forums.macrumors.com/threads/data-migration-local-ke... https://apple.stackexchange.com/questions/142123/extract-passwords-from-local-items-keychain-files https://apple.stackexchange.com/questions/142123/extract-pas... https://apple.stackexchange.com/questions/137250/export-keychains https://apple.stackexchange.com/questions/137250/export-keyc... https://forums.macrumors.com/threads/how-do-i-copy-the-local-items-keychain-over-to-a-new-mac.2097731/ https://forums.macrumors.com/threads/how-do-i-copy-the-local...