Audit Mac Credentials: Passwords vs. Keychain Access
Use the macOS Passwords app for ordinary saved logins and passkeys; use Keychain Access for certificates and keychain items. Screens differ by OS and app version.
Publication & corrections: infostoa · Editorial standards
Individual author and specialist reviewer information is not provided for this article.
Start in the current macOS Passwords app when checking saved website logins, passkeys, or security recommendations. Keychain Access is a management utility for certificates, keychains, and some system or app items. Older Mac articles present Keychain Access as the main password screen; that predates the Passwords app and should not be copied as current menu guidance.
Review saved logins in Passwords
Search for the account and confirm that the service and user name are correct. If macOS shows a security recommendation, read whether it concerns reuse, weakness, or possible exposure, then change the credential on the service’s official site or app. Finding no entry does not establish that an account is safe: the password might be stored in a browser or third-party manager instead.
When Keychain Access is the right tool
Open Keychain Access to inspect certificate issuer, validity, and trust information or manage a particular keychain item. Apple describes certificates as part of a digital identity and says Keychain Access manages certificates and keychains. Do not expect every website login or passkey to appear there. The storage location depends on the browser, sync account, and app settings used when the credential was saved.
Protect secrets while viewing them
Showing or exporting a password can expose it to someone looking at the screen or to an app with access. Do not leave a sensitive item open on a shared Mac or paste its value into ordinary notes or messages. On an organization-managed device, follow the administrator’s policy and IT guidance.
Expert perspective
Macworld contributor Lance Whitney’s 2021 guide describes the then-current Keychain Access workflow, but its menus predate the Passwords app. Apple’s current documentation connects certificate and keychain administration to Keychain Access and ordinary password use to the Passwords guide. Choose the tool by credential type, and check the operating-system version before applying an older procedure.