The Key to Keychain: Effective use of Apple Keychain

In: Applications| How-To

24 Oct 2006

(Click on the pictures to zoom in)
Many people are not even aware of the existence of an application called Keychain Access. This great tool is located in your Utility folder in the Applications directory. Keychain Access is a Mac OS X built in application to securely store your web and login information. I am going to show you how you can use this tool to best serve your interest.
keychain1

Let’s paint the following scenario. How many websites do you access on a daily or weekly basis? I can bet you have an account with eBay. Maybe an account with Paypal to handle your transactions through eBay. But you probably have some money in a bank so let’s assume that you also have a bank account website that you access to pay your bills or manage other online banking transactions. In addition to these, you also probably have an email account with Yahoo or Hotmail; and when Gmail came out to outdo Yahoo and MSN, you probably decided to add an additional email account to your online portfolio.
And to finish, depending on your addiction to shopping you probably have gotten into some online shopping time to time, whether it be Amazon or BestBuy or something else. And chances are pretty good that you come back to all the sites listed above in a regular basis.

So how many accounts and passwords does this leave for you to remember? And do you feel that you have to choose between playing it unsecurely by using the same password for all or most of your accounts, or to often click the “forgot password” link because you have a hard time remembering your accounts and passwords. Well these days are over, because I have a solution to your problem.

Do you remember when you checked the box “Save My Password” on a website
so that you wouldn’t have to enter it again? Have you ever wondered where your
login credentials are stored in your computer? Well it is in your Keychain.

Role of Keychain:
But the point of this article is that this application has much more to offer than just storing your web login and passwords. It can also handle:
- web passwords
- secure notes
- certificates, etc.

keychain2

There are many things to show you about this application but I am going to focus on the most useful and simple to use. (1) How to create a new keychain, (2) how to use Keychain to store your passwords, and (3) how to use Keychain to store your secure notes. You will need a password to unlock your keychain.

Prerequisites:
Any user account in Mac OS X has a default keychain called “login”.
If you want to save your website passwords and secure notes in your
computer, it is recommended to create a new keychain that is not
unlocked automatically when you login to your computer. This way even
if someone else has access to your machine with an admin account, the
person will not be able to unlock your keychain. Failure to do so will
result in all your credentials being stored in your default keychain,
which is okay, so long as no one else has access to your account.
[eminimall]
Warning: If you give your computer away or sell it to someone, at the minimum
wipe your user account. Reformatting the drive after erasing it, is probably more secure. But always make sure that you delete your keychain. Otherwise the new user who has admin access to your machine can retrieve all the saved passwords.

(1) How to create a new keychain

  • 1. Launch the application Keychain Access located in Applications/Utilities
  • 2. Choose File > New Keychain
  • keychain3

  • 3. Type a name and choose a location for the keychain, then click Create.
  • 4. Type a password for the keychain. (For help in choosing a good
  • password, click the key button to the right of the Password field to
    open the Password Assistant.)
    keychain4
    keychain5

  • 5. To make the new keychain your default keychain, click Show
    Keychains, select your new keychain from the list, and choose File >
    Make Keychain (new keychain name) Default.

Click Here

NB: New keychains are set to lock automatically. To change this setting, select the keychain in the Keychains list and choose Edit >”Change Settings for Keychain (new keychain name).”

Each keychain has many categories as you can see in the bottom left
corner of the Keychain application window. When you check “Save Password” in your browser or while accessing another application, Keychain will take care of storing your credentials in the correct category. For the purpose of creating your own password items and secure notes, only the internet and secure notes categories are relevant.

(2) How to use Keychain to store your passwords

  • 1. Open Keychain Access, located in /Applications/Utilities.
  • 2. Click Show Keychains if the Keychains list is not open, then
    select the keychain you want to use (if your keychain is locked, click
    the lock icon then enter your keychain password to unlock it).
  • keychain5

  • 3. Choose File > New Password Item.
  • 4. Type a name or a website (if the password is associated with a website) for the Password Item in the field Keychain Item Name
  • 5. Type a name or a website username (if you are creating this for a website) in the Account Name field.
  • 6. Type the password you want to save in the Password box.
  • keychain9

  • 7. Click Add.




(3) How to create a new secure note to store sensitive information in
your keychain

  • 1. Open Keychain Access, located in /Applications/Utilities.
  • 2. Click Show Keychains if the Keychains list is not open, then
    select the keychain you want to use (if your keychain is locked, click
    the lock icon then enter your keychain password to unlock it).
    keychain5
  • 3. Choose File > New Secure Note Item.
  • keychain7

  • 4. Type a name for the note in the field Keychain Item Name
  • 5. Type the information you want to save in the Note box.
    keychain6
  • 6. Click Add.

NB: Keychain has a nice feature that allows you to test how secure your password is as you type it. Click on the key icon on the right of the password box to use this feature.
keychain8

I hope that now you have a better appreciation of the keychain access application. I hope this boosts your productivity. Do not hesitate to contact me at info@mostofmymac.com should you have any questions. Also I would appreciate if you could add your comment(s) below, Thanks.

Similar Posts:

16 Responses to The Key to Keychain: Effective use of Apple Keychain

Avatar

Mac Thinker

October 24th, 2006 at 8:36 am

For some reason this page displays better on Safari browser.
the images react differently on opera and firefox. Let me know if you experience any issues.

Avatar

Mac Thinker

October 24th, 2006 at 10:21 am

Ok I fixed the issue. For some reason Safari on Mac OS X is the only browser (among firefox, opera, IE and AOL) who can display tiff picture on a webpage by default. So I had to change my tiff pictures into png.
In order to zoom in a picture, just click on it and enjoy my web 2.0 zooming style.

Avatar

Wes

October 31st, 2006 at 12:06 pm

Your tutorial was very helpful. I’m left, however, with one question. How do you use Keychain to populate a password into a website? Following your directions, I’ve created a keychain for holding the password for accessing my bank account. When I go to the bank url, however, nothing happens. It would be a huge help if your tutorial went the next step and showed how to use keychain to actually log into a password protected site.

Thanks.

Avatar

Mac Thinker

October 31st, 2006 at 2:58 pm

Thank you for your feedback Wes. I took note of what you would like to know and I will put together a follow up tutorial on how to use the keychain to log into a password protected site.

Avatar

tizzod

November 29th, 2006 at 4:17 pm

Have you had a chance to do a quick tutorial on using keychain with web passwords? Is there a way safari/firefox can prompt keychain to request the password for a certain site?

Avatar

Mac Thinker

November 29th, 2006 at 5:20 pm

Tizzod,
Thanks for reaching out to mostofmymac.com
I will let you know as soon as I have a tutorial ready…

Avatar

Tom

December 2nd, 2006 at 6:30 pm

I swear “Save my password” in websites stores a Cookie to remember that information?

Avatar

> evolveRX » Use your keychain!

December 27th, 2006 at 5:39 pm

[...] Most of My Mac – Keychain Access [...]

Avatar

Keli

February 14th, 2007 at 4:01 pm

I was wondering if you had any sucess making that tutorial for using keychain with safari and web passwords.

Avatar

meaghan

February 22nd, 2007 at 3:21 pm

my keychain pops up every five minutes and it won’t stop i keep hitting the cancel button can someone help me make this stop. thanks

Avatar

Mac Thinker

February 22nd, 2007 at 4:04 pm

Keli, I got your comment, I will get back to you on that. I believe that the was a bug in the keychain application that prevented it from working with web password entered directly through the keychain application. I submitted the problem to Apple Developers and I am waiting to hear back from them. I will keep you posted.
Thanks again for contacting us.

Avatar

Mac Thinker

February 22nd, 2007 at 4:16 pm

meaghan,

Once reason why your keychain could keep popping up could be because you have recently upgraded your system and it might need you to change/update all your keychains. If is hard for me to help you without knowing what you are looking at. Feel free to email us (info at mostofmymac.com) with a screenshot of the window that you are getting and we’ll be able to assist you further.

If you do not know how to take screenshots on your mac, please check today’s article on how to capture your screen (http://www.mostofmymac.com/articles/screen-capturing-using-grab-on-mac-os-x/)

Thanks for contacting us.
TheMacThinker

Avatar

GameFunSite.com

July 9th, 2007 at 2:01 am

Cheers: thanks for thehelpful info here! Non-tech-non-programmer type mac users are definitely at a disadvantage about all this security stuff. I’ve had macs for years and just now is the first time I’ve begun to be aware of keychain, much less try to understand how to use it. and it’s not very intuitive or mac like if you ask me. Plus it’s doing weird things.

I think I am going to have to do a system reinstall or something because in keychain prefs, everytime I uncheck the box “Set login keychain as default” (because I don’t want it to UNlock automatically at login) — the unchecked box won’t stick. It keeps re-checking itself.

Even fter I close the prefs window or after I quit Keychain and go back and look, that dang box is checked again so that means it is automatically unlocking at login, which i don’t want it to do.

I can’t find anything else about how to fix this, so does that mean a complete system reinstall?

Or do you maybe know a different strategy or keychain secret that no one else seems to know about? I’ve also recently installed 1passwd to help manage browser related password access.

Also: do you know: what boxes should be checked or unchecked in the Show:Users ’shared’ items (both Users & Mac OS X System) Keychain List?

Now more strange things are happening including an error message: An unexpected error has occurred tha may cause Keychain to malfunction. You May want to quit the Keychain application. Error: connection went invalid while waiting for a reply.

Followed by Continue & Quit buttons.

It’s all very confusing – how to know what it means. hope you will have time to reply. any help appreciated – thank you please

Avatar

Marc

July 12th, 2007 at 6:44 am

hi, great tutorial.
do you know the use of the “Keys icon” on the lower left pane?

Avatar

George Muir

July 29th, 2007 at 8:08 pm

Hi there, my lack of knowledge of the Keychain is proving very difficult for me. I decided to reinstall my Panther disks as my computer wasn’t working too well (or so I thought). Bad idea, my troubles started big time, I started getting messages regarding mail updates, I declined at first then succumbed to accepting and then I could no longer get access to my server. Couldn’t send or receive (Mac) emails. Prior to this, I kept getting messages to enter my Keychain password, which of course I couldn’t remember. Woe is me (sob) thanks for any help, George

Avatar

Miles

December 12th, 2007 at 12:17 pm

very useful, thank you.

Comment Form

About this blog

The outside of the box said "Windows base machine or better", so I bought a Mac.

Specials

Stay Tuned! To our daily articles to help you get the most out of your Mac.


Your Ad Here Your Ad Here