{
  "slug": "apple-passwords",
  "category": "password-managers",
  "name": "Apple Passwords",
  "description": "Apple's password manager, built into iOS, iPadOS and macOS as the Passwords app and synced through iCloud Keychain. It stores passwords, passkeys and verification codes, with an iCloud app for Windows.",
  "website": "https://support.apple.com/guide/passwords/welcome/mac",
  "license": null,
  "platforms": [
    "ios",
    "macos",
    "windows"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "C",
  "score": 64,
  "coverage": 100,
  "summary": "Apple Passwords scores 64 out of 100 (grade C) on the password managers criteria. It meets 6 of 11 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, security headers and end-to-end encrypted vault. It partly meets no trackers or telemetry, local or self-hosted option and full export. It does not meet open source and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/password-managers/apple-passwords/",
  "markdown": "https://privacyratings.com/password-managers/apple-passwords/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://www.apple.com/legal/privacy/data/en/device-analytics/",
      "note": "Device analytics are shared with Apple only with consent, but Apple's websites load first-party analytics by default."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/en-ww/",
      "note": "The Passwords app has no ads, and Apple states it does not sell or share personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/transparency/",
      "note": "Apple publishes government request counts and outcomes twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/law-enforcement-guidelines-us.pdf",
      "note": "Apple notifies customers when their account information is sought, unless notice is prohibited or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.icloud.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.icloud.com",
      "note": "Grade A+ (130/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "e2ee_vault": {
      "title": "End-to-end encrypted vault",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://support.apple.com/en-us/102651",
      "note": "Passwords and Keychain are always end-to-end encrypted, and Apple does not have the keys."
    },
    "self_host_or_local": {
      "title": "Local or self-hosted option",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://support.apple.com/guide/passwords/export-passwords-mchl35b12625/mac",
      "note": "Passwords can stay on one device without iCloud sync, but there is no file or self-hosted option. Data can be exported."
    },
    "export": {
      "title": "Full export",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://support.apple.com/guide/passwords/export-passwords-mchl35b12625/mac",
      "note": "Passwords can be exported to a CSV file on a Mac. No export is documented for passkeys."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T10:59:40.545Z"
  },
  "last_modified": "2026-10-01T11:14:42Z"
}