> iCloud backups are usually encrypted (by default with a key Apple possesses). This is not an iCloud backup. It's "Apple ID account and device information". K

> iCloud backups are usually encrypted (by default with a key Apple possesses). This is not an iCloud backup. It's "Apple ID account and device information". Keep in mind that Apple is playing a dual role in this case, and you appear to be conflating the two. Of course Apple runs iCloud Keychain, which syncs client data including the private keys. But that's supposed to be all end-to-end encrypted, including the metadata. It would be quite a disturbing breach of privacy if Apple knew the websites associated with your passkeys, wouldn't it? "Keychain items are encrypted using two different AES-256-GCM keys: a table key (metadata) and a per-row key (secret key). Keychain metadata (all attributes other than kSecValue) is encrypted with the metadata key" https://support.apple.com/guide/security/keychain-data-protection-secb0694df1a/web https://support.apple.com/guide/security/keychain-data-prote... But this is not any old passkey: it's a passkey for apple.com. Apple is also playing the role of server to which the client authenticates. That's entirely separate from iCloud Keychain client data. You would think that in its role as server, Apple would have only the same client information as any other passkey server, e.g., Github.