10 ms·
Official Chrome extension to use iCloud Keychain Passwords
- leesalminen 3y agoAnyone know if this exists for Firefox?
- Alifatisk 3y agoCan’t find any official extension for it
- JohnTHaller 3y agoHasn't this been out for a while? There are reviews going back to Jan 2021.
- manderley 3y agoThe Windows version has been out for a while. Mac OS support is new.
- Alifatisk 3y agoThis is not new?
- mantra2 3y agoIt’s new for macOS.
- Alifatisk 3y agoThe chrome extension is new for macOS? To my understanding, this is meant for Windows users. There is no point in having this when running macOS when iCloud Passwords is built-in.
- mantra2 3y agoIt’s not built-in in a way that works with Chrome/Brave/Edge well, this fixes that. Requires beta though. Basically they updated this old windows bridge extension for Chrome to work on macOS. https://lifehacker.com/you-can-finally-use-icloud-keychain-in-chrome-1850639711 https://lifehacker.com/you-can-finally-use-icloud-keychain-i...
- Alifatisk 3y agoOh okey
- DIVx0 3y agoI would really love to see an official "hide my email" extension from Apple. I use this feature so much that I go out of my way to use it since I don't use Safari and that's the only integration for HME.
- fieryskiff11 3y agoNot really an Apple guy but this[0] came up first and its open source, have you seen it? [0]: https://github.com/dedoussis/icloud-hide-my-email-browser-extension https://github.com/dedoussis/icloud-hide-my-email-browser-ex...
- mynameisvlad 3y agoI have the same feature using 1Password and Fastmail. https://1password.com/fastmail/ https://1password.com/fastmail/ Bonus is that I use a separate subdomain of my custom domain for disposable email addresses which means it never fails email checks (some don't like disposable/temporary email domains).
- endisneigh 3y agoDoesn’t seem like a bonus. Your custom domain could just be blocked wholesale. Hide my email uses iCloud, not a separate domain. iCloud addresses probably won’t be blocked as that’s the default email given for hundred million plus Apple accounts.
- scorxn 3y agoCheck out Firefox if you need a cross-platform browser that syncs passwords, etc. I use Windows, macOS, Linux, and iOS, and I've found Firefox to be my best option.
- jdalgetty 3y agoIt’s my go to password manager as well but unfortunately they stopped updating it.
- scorxn 3y agoThe password management was reincorporated into the Firefox app, and you can tell iOS to use Firefox as your password manager. See bottom of https://support.mozilla.org/en-US/kb/end-of-support-firefox-lockwise https://support.mozilla.org/en-US/kb/end-of-support-firefox-...
- jachee 3y agoI want the one that stores the passwords securely in my devices’ secure enclaves whenever possible. I also prefer the native OS browser without extra reskinned chrome (not Chrome) wrapped around it. Firefox can’t do that. Don’t get me wrong, I like Firefox, but I trust Apple more. Also: Firefox can’t afford to say no to the FBI.
- arcanemachiner 3y agoI'm pretty sure the Firefox data is E2E encrypted. As in "If you forget your password, your data is gone."
- ramesh31 3y ago>I'm pretty sure the Firefox data is E2E encrypted. As in "If you forget your password, your data is gone." The argument though is that it's not true E2E without the secure enclave. App data can be compromised in many ways. Apple goes to incredible lengths (including burning the root key which cannot be retrieved or reset from outside the enclave into the silicon during manufacturing with no way of them being able to tell what it is) to ensure a chain of trust from the point that anything physically enters the device.
- LionTamer 3y agoI believe this is only for Windows
- Shank 3y agomacOS Sonoma (beta currently) allows it to work on macOS!
- babyshake 3y agoIf already using Chrome's built-in password feature, is there a good reason to use this besides just wanting to use one FAANG ecosystem versus another?
- azinman2 3y agoIt’s more geared for Apple users. I for one am really happy!!
- sitzkrieg 3y agodepends on how much you believe apple marketing. but you're right, theyre all advertising companies anyway
- _23sd 3y agoChrome doesn't have a TOTP authenticator, Keychain does. I don't use that feature in any password manager but some people really love it. Keychain will sync on any Windows/Mac Chromium based browser (so Edge, Brave, etc) plus Safari, so it's a little bit less locked in than Chrome but not as good as a standalone password manager.
- kstrauser 3y agoNow I (using Safari) can use the upcoming iOS/iPadOS/macOS version’s shared password functions with my wife (who likes Chrome), all without a separate password manager. We’ve used 1Password for ages, and I still like it a lot at work, but can probably get by with the built-in tools now.
- eyelidlessness 3y agoFor users with multiple Apple devices, this should enable the same password syncing and auto gen capabilities as using Safari. For me, that means a lot less hassle using Chrome as my dev browser (otherwise when I’m prompted to create a password, I switch to Safari to create/submit it, then copy from Keychain Access, which works but it’s a PITA).
- hot_gril 3y agoNo, it's just an ecosystem thing.
- Jerry2 3y agoI wish they would add Linux support. I use Linux and macOS almost 99% of the time and don't use Windows. Please Apple, make it happen.
- rollcat 3y agoMake that two of us! And OpenBSD support too, while at it. (Maybe just release the source code for the native blob.)
- lxgr 3y agoHuh, interesting, so this only works on Chrome on Windows and macOS? I wonder if that's due to a technical limitation (maybe it uses an OS-native hardware secret storage mechanism that Linux does not offer), or just because Apple refuses to acknowledge the existence of Linux on the desktop.
- captn3m0 3y agoLast time I tried, couldn’t get it working on Linux either. As an iOS+Linux user, iCloud passwords would be great, if only it worked everywhere. So for now, I stick with my pass setup.
- westondeboer 3y agoneed beta os to run this.
- hughw 3y agoApple/Safari cannot seem to distinguish my various AWS Cognito identities from one another. Never stopped to look into it, but Firefox and Chrome seem to have no problem understanding the difference between xxx.awscognito.com and yyy.awscognito.com. Which is to say, I doubt I'll be using it in Chrome.
- WirelessGigabit 3y agoBitwarden defaults to Base domain. So if your credentials are stored for foo.bar.com they'll be proposed on any subdomains and the naked domain of bar.com. You can switch it to Host. That way the credentials are only proposed on on foo.bar.com but not on cuz.bar.com. Safari doesn't do that.
- ramenmeal 3y agoI've been meaning to migrate off of Lastpass, I think this would put Keychain in the mix of options. I haven't used keychain in years, is it still pretty clunky?
- manuelmoreale 3y agoUnfortunately yes, it still is IMO.
- nielsbot 3y agoKeychain Access.app hasn't changed in years. But if you're just interested in filling out passwords, then you can use the Passwords settings pane in system settings and/or the password settings screen in Safari.
- robertoandred 3y agoHow so?
- blitzar 3y agoThere is no application and doing anything from looking for a login detail to editing a password is on a par, interface wise, as editing a registry key on windows.
- robertoandred 3y agoSystem Settings has the Password section and there's Keychain Access.
- arustad 3y agoKeychain is clunky, but Passwords is better. Functionally Passwords isn’t as robust as LastPass (or 1Password) but their handling of their last security breach proved they’re not deserving of my business and getting off their service was a high priority for me. iOS 17 and macOS Sonoma should have better 3rd party browser integration, certainly Chrome for now… hopefully Firefox in the near future.
- pseudosavant 3y ago"Download iCloud for Windows to use iCloud Passwords"... On Windows this requires 'iCloud for Windows'. A definite non-starter for me. There is no reason to have an extension like this call out to locally installed software for a cloud service like password management. I'm sure it can be done in JS/TS/Wasm within the context of an extension (doesn't have same-origin issue).
- rzimmerman 3y agoI don't know the internals, so I'm guessing, but for password sync between iCloud devices Apple might require a hardware protected key (like in a TPM). In which case it does make sense that this requires a native process running on the host. At least until that can be exposed in a meaningful way through a Web API. I doubt it's as simple as querying the iCloud servers for the plaintext password.
- cavisne 3y agoPretty sure 1Password has the same constraint. Lastpass did not but well... they dont have the best reputation anymore.
- tylerhou 3y agoAFAIK in web TS/JS/Wasm you cannot mark memory regions as in-memory only (mlock on Linux). This means that the secrets in JavaScript can easily be leaked if the kernel decides to page V8 process memory (unencrypted) to disk. This risk is unsuitable for an application that needs to handle sensitive credentials like an encryption key for all of a person’s passwords — or the vault itself. Also, this is why I do not trust LastPass — they don’t run a native module, so how do I know that my vault isn’t just being stored on disk?
- mark-wagner 3y agoI attempted many times to use this extension under Windows. It was one of the most frustrating software installation experiences I've ever had. I never got it to work. Note that it has a 2 star review. Perhaps Apple developers don't know how to write a Windows program but the macOS version will be usable.
- Matheus28 3y agoSame. Luckily (recently?) iOS added support to using Chrome’s keychain to fill in passwords. It seems you still have to open the chrome app from time to time to sync passwords, however.
- judge2020 3y agoAlso, iOS 17 adds using your third-party password manager for using (signing challenges with) passkeys. The only issue I can find is that you can't select two or more third-party password/passkey filling apps, unless one is "iCloud Passwords & Keychain". So if your setup is 1Password for passwords and iOS for most of your Passkeys, you can do that, but hopefully you use the same third-party passkey and password implementation.
- geuis 3y agoI'm honestly surprised to not only see this extension posted on HN, but for it to be upvoted so many times. This is an old extension and I can tell you from personal experience, It doesn't work. I do productivity and work stuff on my Macbook and have a Windows desktop machine for games and movies. I have tried for several years to figure out a solution that would let me use the iCloud keychain to store all u/p and let me use them across browsers and desktops. I have tried every combination of uninstall/reinstall/change permissions etc with the extension on Windows 10 and it doesn't do anything.
- syspec 3y agoSays updated as of July 14, 2023
- capableweb 3y ago> I have tried for several years to figure out a solution that would let me Pro-tip: Don't use software by companies who explicitly hate cross-platform software when you need said software to work cross-platform. For credentials/secrets, there are other tools that actually does a really decent job at being cross-platform (including iOS/Android). Two of these are 1Password and BitWarden (FOSS as well). I'm a happy user of the former, but lots of people (including many here on HN) sing praise about the latter.
- manzu 3y agoYeah It’s an old extension and doesn’t work great but it sort of works. I had to disable autocomplete in forms for it because it would break even apple’s login screen - couldn’t submit (some js error from the injected extension code). now i just use it from the button in the toolbar and that gives me the password
- capableweb 3y agoI can see that it says "Offered by: Apple Inc." but beyond that, how are people supposed to see it's "official"? As far as I can tell, there are no links from apple.com/* to this extension.
- pdpi 3y agoApple has documentation about using icloud passwords from Windows[1]. I tried setting it up a while back but it doesn't support Firefox. If I recall correctly, you get links to the extensions from within the icloud app on windows. 1. https://support.apple.com/en-gb/guide/icloud-windows/icw76039ec0f/icloud https://support.apple.com/en-gb/guide/icloud-windows/icw7603...
- shreyas_gupta 3y agoI think the extension will get updated by the time Sonoma is publicly available.
- 1letterunixname 3y agoI purposely don't use iCloud Keychain because it's not portable to Linux, Android, and Windows. Instead, Bitwarden (setup correctly) and the Chrome browser extension. On iOS, Bitwarden can act as a total replacement for Keychain. Works on Android too.
- exabrial 3y agoCan this be used on a mac however?
- m3kw9 3y agoWhat could go wrong?
- herdcall 3y agoI've been using this with Microsoft Edge on Windows, this is so very useful. It does have autofill on the browser, but for some reason it keeps asking for password if you want to directly open it to add a password or look up something.
- jgimenez 3y agoI guess this is Apple's way to add Passkeys support into Chrome as well, for macOS users using Chrome, which is very common, or macOS users with an Android device.
- aequitas 3y agoChrome used to have native support for Keychain back in the day when it was still growing. Then suddenly they no longer needed that feature. Glad to see this is coming back in some capacity.
- specialist 3y agoCool. I'll probably use Chrome more now. I'd use Firefox full time with an extension like this. -- Yes and: The Apple Passkey future can't get here soon enough. Meanwhile, I wish Keychain allowed memo fields. Some place to record all those stupid personal security questions. (1Password has memo fields. I switched to iCloud once I started using Apple Pay, because of integration, ubiquity.) Also: I (officially) asked my credit union about using U2F with my account(s). No plans. This crap needs to be legislated, or some other forcing function.
- grzm 3y agoI use Keychain’s secure notes for security questions and the like.
- skrowl 3y ago[dead]