Posts

Apple’s iCloud Keychain Password Management Is All Many People Need

/in /by

Apple’s iCloud Keychain Password Management Is All Many People Need

We constantly recommend using a password manager like 1Password, BitWarden, or Dashlane. But many people resist committing to yet another app or paying for yet another service. Isn’t Apple’s built-in iCloud Keychain password management good enough?

The answer now is yes, thanks to two recent changes:

  • In iOS 17.3, Apple added Stolen Device Protection, which leverages biometric authentication—Face ID or Touch ID—to protect users against thieves who would surreptitiously learn someone’s passcode, steal their iPhone, and then take over their digital lives. One of the worst aspects of that attack was that the iPhone passcode was sufficient to access the user’s stored passwords, so the thief could get into everything.
  • Until mid-2023, Apple’s built-in password management worked only in Safari, which was problematic for users who rely on other browsers. Then Apple updated its iCloud Passwords extension for Google Chrome to work not just in Windows, but also in Mac browsers based on Google Chrome running in macOS 14 Sonoma. There’s also now an iCloud Passwords add-on for Firefox.

If you aren’t yet using a password manager, try iCloud Keychain.

Passwords Basics

Apple integrated iCloud Keychain into macOS, iOS, and iPadOS at a low level, so you mostly interact with your passwords in Safari. But first, make sure to enable iCloud Keychain so your passwords sync between your devices. On the Mac, you do that in System Settings > Your Name > iCloud > Passwords & Keychain. On an iPhone or iPad, it’s in Settings > Your Name > iCloud > Passwords and Keychain.

If you’re using a browser other than Safari, install the iCloud Passwords extension or add-on and activate it by clicking it in the toolbar and entering the verification code when prompted.

When it comes to website accounts, there are two main actions: creating a login and logging in to a site:

  • Create a new login: When you need to create an account on a new website, after you enter whatever it wants for email or username, Safari creates a strong password for you. Unfortunately, the iCloud Passwords extension or add-on on the Mac can’t generate passwords—you can either create a strong password manually or switch to Safari temporarily to let it create one. When you submit your credentials, you’ll be prompted to save them.
  • Autofill an existing login: The next time you want to log in to a site for which you’ve saved credentials, Safari or your other browser on the Mac displays a pop-up with logins matching the domain of the site you’re on. On the iPhone or iPad, you might get an alert at the bottom of the screen or have to pick a choice in the QuickType bar above the keyboard.

For basic usage, that’s it! However, iCloud Keychain can make mistakes. The site shown above asks for both an email address and a username and wants the email address for logging in, but iCloud Keychain remembered the username instead. Happily, Apple makes it easy to fix such unusual missteps. On the Mac, open System Settings > Passwords, or on the iPhone or iPad, open Settings > Passwords. Here’s where you find and edit your saved logins.

Open the desired login by double-clicking it on the Mac or tapping it on the iPhone or iPad, then click or tap Edit and make any desired changes.

iCloud Keychain provides additional features and options:

  • A search field at the top of the Passwords window or screen helps you find logins if scanning the full list is frustrating.
  • You can use commands in the + menu to create new passwords and shared groups. On the Mac, commands in the ••• menu let you import and export passwords; the iPhone and iPad use that menu to bulk-select passwords for deletion and show generated passwords.
  • Shared groups let you share a subset of passwords with family or colleagues. Choosing New Shared Group triggers an assistant that walks you through naming the group, adding people from Contacts, and choosing which passwords to share. You can move passwords between groups at any time.
  • The Security Recommendations screen displays logins exposed in known breaches and points out logins with weak passwords. Check those and update them as necessary.
  • In Password Options, you can turn off autofill, but why would you? Another option automatically deletes verification codes you receive in Messages after it inserts them with autofill.
  • On websites that support two-factor authentication, you can set up a login to autofill the verification code. During setup on the site, you’ll get a QR code you can scan with an iPhone or iPad if you’re using a Mac; if you’re using an iPhone or iPad, touch and hold the QR code and choose Add Verification Code in Passwords. Once you finish configuring the login, you’ll have to enter the six-digit verification code on the site to link it with the login.

Overall, iCloud Keychain provides the password management features that most people need, and it’s a massive security improvement over keeping a document of your passwords on your desktop.

(Featured image by iStock.com/loooby)

Social Media: Apple’s iCloud Keychain password manager keeps improving, and we now recommend it, especially for those not already using a third-party password manager. Here’s how to use iCloud Keychain to store and enter secure passwords.

Looking for Apple Manuals? Check the New Documentation Site

/in /by

Apple publishes a multitude of manuals and tons of technical documentation for its products on its support site, but until recently, it could be challenging to find something specific because the search engine on Apple’s site is poor. For a better path into Apple’s online support materials, check out the company’s new Documentation site, which brings together manuals, specs, and some downloads for nearly all its products. The operating system User Guides are particularly helpful, and they even provide a Version pop-up menu that lets you make sure you’re getting information for the version you’re using.

(Featured image by iStock.com/Ildo Frazao)

Social Media: Do you want to read the actual manuals or specs for Apple products? You can now easily find them on Apple’s new Documentation website.

How to Sync Your Text Messages across All Your Apple Devices

/in /by

Although many of us think of Messages as an iPhone app, Apple’s platform integration lets you read and reply to conversations in Messages on other Apple devices, including the Mac and iPad. All your devices must have the correct settings to make this work reliably. We regularly hear from users who don’t see all their messages on all their devices. If that’s you, check these settings:

  • Same Apple ID: Your devices all know they’re yours when they’re logged in to the same Apple ID. That’s not a problem for most people, but couples who share an Apple ID, for instance, can run into trouble here. To verify this, open Settings > Your Name in iOS and iPadOS, or System Settings > Your Name in macOS. The email address under your picture at the top of each of those screens should match. If it doesn’t, scroll to the bottom, tap or click Sign Out, and sign in again with the correct Apple ID.
  • Two-factor authentication: As with so many Apple services now, your Apple ID must be set up for two-factor authentication, which causes certain logins to be queried a second time on another device. Most people have two-factor authentication set up by now, but if not, turn it on using Apple’s instructions.
  • iCloud Keychain: Your devices must have iCloud Keychain turned on to share your Messages account information. It’s probably already on, but you can enable it if not. Turn it on for an iPhone or iPad in Settings > Your Name > iCloud > Passwords and Keychain > Sync this iPhone. On a Mac, the switch is in System Settings > Your Name > iCloud > Passwords & Keychain > Sync this Mac.
  • Messages in iCloud: This is the key setting—the previous three are just foundational requirements. Enable it for an iPhone or iPad in Settings > Your Name > iCloud > Show All > Messages in iCloud > Use on this iPhone. On the Mac, look in System Settings > Your Name > iCloud > Show More Apps > Messages in iCloud > Use on this Mac.
  • iMessage account: You’ve checked that you’re using the same Apple ID everywhere, but there’s a similar setting that’s also important. On your iPhone or iPad, go to Settings > Messages > Send & Receive and make sure you’re signed into iMessage with the same Apple ID—look at the bottom of the screen. Also, ensure you’re set to send and receive from your phone number and appropriate email addresses. It’s safest to send and receive from all the possibilities and start new messages from your phone number. On the Mac, verify that you have the same settings in Messages > Settings > iCloud.
  • Text Message Forwarding: Turning on Messages in iCloud should keep message history synced across all your devices, including green bubble SMS/MMS text messages. However, it’s worth verifying that SMS/MMS messages are being sent to all your devices. On your iPhone, in Settings > Messages > Text Message Forwarding, select all the devices you want to receive text messages.

Although all the above settings may seem like a lot, most should already be set up correctly. We listed them all because when people have trouble with their messages syncing across all their devices, one or more of these are usually set wrong.

Even with everything configured correctly, there can be hiccups—nothing’s perfect. If messages fail to sync consistently, try these troubleshooting steps:

  • Use the Sync Now button in the Messages in iCloud settings on any device that hasn’t caught up. That likely won’t help instantly, but syncing should eventually catch up.
  • Restart the device—it’s always worth trying. On an iPhone or iPad, choose Settings > General > Shut Down (at the bottom), slide to power off, and then press and hold the side (iPhone) or top (iPad) button to turn the device back on. On a Mac, just choose Restart from the Apple menu.

When Messages in iCloud is working properly, though, you can carry on text message conversations using any of your devices at any time. It’s especially nice to switch to the Mac for easier typing when you’re in an involved conversation.

(Featured image by iStock.com/anyaberkut)

Social Media: One of the best parts of Apple’s tight platform integration is that you can view your text messages on all your devices. Or at least you can if you get everything set correctly.

How to Avoid Head-Tracked Spatial Audio for FaceTime Audio Calls

/in /by

If you listen to a FaceTime Audio call using AirPods and hear the other person’s voice moving annoyingly from side to side as you turn your head, the problem is likely head-tracked spatial audio. In general, spatial audio attempts to make sounds seem to come from all around you, and its dynamic head-tracking option adjusts the audio for each ear to simulate how the sound would change as your head moves. Dynamic head tracking may be desirable for music or movies, but with a FaceTime Audio call, having the other person flip back and forth between your ears can be highly disconcerting. To stop this behavior on an iPhone or iPad, open Control Center, touch and hold the volume control, and tap either Off or Fixed instead of Head Tracked. Spatial audio isn’t an option on Mac FaceTime calls.

(Featured image by iStock.com/1550539)

Social Media: If you’ve ever experienced a weird situation where sound on a FaceTime Audio call moves back and forth between your AirPods, it’s because of spatial audio’s dynamic head tracking. Learn how to turn it off.

Annoyed by Inline Predictive Text Suggestions? Here’s How to Turn Them Off

/in /by

In a slight nod to the hype surrounding generative AI, Apple added inline text prediction capabilities to the iPhone, iPad, and Mac. They can be helpful, particularly on the iPhone and iPad, where it’s often much easier to tap the Space bar than to finish typing a word or sentence. But that’s less true on the Mac, where a fast typist can be slowed down or derailed by the suggestions, and some people dislike having an AI finish their thoughts. The feature is easily turned off. On the iPhone and iPad running at least iOS/iPadOS 17.2, go to Settings > General > Keyboard and switch off Show Predictions Inline. (Leave Predictive Text on to continue to get suggestions above the keyboard.) On the Mac running macOS 14.2 Sonoma or later, open System Settings > Keyboard, click Edit under the Text Input header, turn off “Show inline predictive text,” and click Done.

(Featured image based on an original by iStock.com/Armastas)

Social Media: If you’re not a fan of the new inline text predictions on your iPhone, iPad, or Mac, you can easily turn them off and get back to typing only the words you want to appear.

Use iOS 17.3’s Stolen Device Protection to Reduce Harm from iPhone Passcode Thefts

/in /by

Last year, a series of articles by Wall Street Journal reporters Joanna Stern and Nicole Nguyen highlighted a troubling form of crime targeting iPhone users. A thief would discover the victim’s iPhone passcode, swipe the iPhone, and run. With just the passcode, the thief could quickly change the victim’s Apple ID password, lock them out of their iCloud account, and use apps and data on the iPhone to steal money, buy things, and wreak digital havoc.

In essence, Apple allowed the passcode, which could be determined by shoulder surfing, surreptitious filming, or social engineering, to be too powerful, and criminals took advantage of the vulnerability. It’s best to use Face ID or Touch ID, especially in public, but some people continue to rely solely on the passcode.

Apple has now addressed the problem for iPhone users with the new Stolen Device Protection feature in iOS 17.3. It protects critical security and financial actions by requiring biometric authentication—Face ID or Touch ID—when you’re not in a familiar location like home or work. The most critical actions also trigger an hour-long security delay before a second biometric authentication. We recommend everyone who uses Face ID and Touch ID turn on Stolen Device Protection. The feature is not available for the iPad or Mac, but neither is as likely to be used in places like the crowded bars where many iPhones have been snatched.

How Stolen Device Protection Works

The location aspect of Stolen Device Protection is key. When you’re in a “significant location,” a place your iPhone has determined you frequent, you can do everything related to security and financial details just as you have been able to in the past, including using the passcode as an alternative or fallback.

However, when you’re in an unfamiliar location, as you would likely be if you were out in public where someone might steal your iPhone, Stolen Device Protection requires biometric authentication to:

  • Use passwords or passkeys saved in Keychain
  • Use payment methods saved in Safari (autofill)
  • Turn off Lost Mode
  • Erase all content and settings
  • Apply for a new Apple Card
  • View an Apple Card virtual card number
  • Take certain Apple Cash and Savings actions in Wallet (for example, Apple Cash or Savings transfers)
  • Use your iPhone to set up a new device (for example, Quick Start)

Some actions have even more serious consequences, so for them, Stolen Device Protection requires biometric authentication, an hour security delay—shown with a countdown timer—and then a second biometric authentication. The delay reduces the chances of an attacker forcing you to authenticate with the threat of violence. You’ll need to go through the double authentication plus delay when you want to:

  • Change your Apple ID password (Apple notes this may prevent the location of your devices from appearing on iCloud.com for a while)
  • Sign out of your Apple ID
  • Update Apple ID account security settings (such as adding or removing a trusted device, Recovery Key, or Recovery Contact)
  • Add or remove Face ID or Touch ID
  • Change your iPhone passcode
  • Reset All Settings
  • Turn off Find My
  • Turn off Stolen Device Protection

There are a few caveats to keep in mind:

  • The iPhone passcode still works for purchases made with Apple Pay, so a thief could steal your passcode and iPhone and buy things.
  • Although Apple says it’s required, you can turn off Significant Locations to require the extra biometric authentication and security delay everywhere. That would eliminate the worry about a thief using Significant Locations to go to your most recent familiar spot in an attempt to sidestep the extra authentication.
  • If you plan to sell, give away, or trade in your iPhone, make sure to turn off Stolen Device Protection first. Once it’s out of your physical control, no one else will be able to reset it.

Turn On Stolen Device Protection

Before you get started, note that Apple says you must be using two-factor authentication for your Apple ID (everyone should be anyway), have a passcode set up for your iPhone (ditto), turn on Face ID or Touch ID, enable Find My, and turn on Significant Locations (Settings > Privacy & Security > Location Services > System Services > Significant Locations), although this last one doesn’t actually seem to be required.

Then, go to Settings > Face ID/Touch ID & Passcode, enter your passcode, and tap Turn On Protection. (If it’s enabled, tap Turn Off Protection to remove its additional safeguards.)

Once Stolen Device Protection is on and you’re in an unfamiliar location, the actions listed above will require either biometric authentication or two biometric authentications separated by the hour-long security delay.

There is one group of people who should not turn on Stolen Device Protection: those for whom Face ID or Touch ID don’t work. Most people have no trouble with Apple’s biometric technologies, but some people have worn off their fingerprints or have other physical features that confuse Touch ID or, less commonly, Face ID.

If that’s you, stick with our general recommendation for discouraging possible iPhone thefts: Never enter your iPhone passcode in public where it could be observed.

(Featured image by iStock.com/AntonioGuillem)

Social Media: In iOS 17.3, Apple has introduced Stolen Device Protection to discourage iPhone thefts enabled by a revealed passcode. It requires additional biometric authentication, and we recommend that everyone who uses Face ID or Touch ID enable it.

Use StandBy to Make Your iPhone into a Clock, Photo Frame, and More

/in /by

iOS 17 brings a new mode for the iPhone: StandBy. All you have to do is connect your iPhone to a charger wirelessly or with a cable, position it on its side in landscape orientation, and press the side button to lock the screen. Standby works best with a MagSafe charging stand. Swipe left or right to switch between three screens: widgets, photos, and clocks. Swipe up and down to move between widgets, photo collections, and clock styles. On the widget screen, touch and hold to add and remove widgets, and on the photo screen, to choose which collections and albums to display. You can choose how long the display stays active in Settings > StandBy > Display. By default, it will stay on all the time on iPhone models with an Always-On display; a tap or nudge will wake it on other iPhone models. Finally, StandBy remembers your preferred view in different locations, so it can be a clock in the bedroom, a photo frame in the kitchen, and a clock at the office.

(Featured image by Apple)

Social Media: The new Standby mode turns your iPhone into a digital picture frame, clock, or customizable widget display—and it remembers which approach you prefer in different locations.

Lift Objects from Photos on the iPhone

/in /by

Have you ever wanted to extract an object from a photo for use in another context? Starting with iOS 16 on a relatively recent iPhone, you can do that with many photos. In the Photos app, touch and hold the object, and if Photos can extract it, you’ll see a highlight run around its edges. Raise your finger, and a popover lets you copy the object, look up information about it, turn it into a sticker (in iOS 17), or share it. Or you can start dragging the object, switch apps with your other hand, and drop it into another app, like Messages. With Universal Clipboard, you can even lift an object on an iPhone, copy it, switch to Preview on your Mac, and choose File > New from Clipboard. File this one under Arthur C. Clarke’s Third Law, which states, “Any sufficiently advanced technology is indistinguishable from magic.”

(Featured image by Adam Engst)

Social Media: Starting with iOS 16, Apple made it possible to extract objects from photos. You can drag objects to other apps, copy them, turn them into stickers, and more.

Locate a Featured Lock Screen Image in Photos

/in /by

iOS’s Photo Shuffle wallpaper does a great job of identifying attractive photos for your Lock Screen. However, if you’re like us, you’ll sometimes wonder when or where you took a Lock Screen photo. Here’s how to figure that out. Touch and hold the Lock Screen when it’s displaying the photo in question, tap Customize, tap the Lock Screen wallpaper, tap the ••• button in the lower-right corner, and tap Show Photo in Library. Then you can swipe up to reveal more information about the photo, swipe left and right to see the photos on either side, or pinch to see it in the context of your entire photo library.

(Featured image by Apple)

Social Media: Do you sometimes wonder when or where you took a photo that iOS’s Photo Shuffle wallpaper is displaying on your Lock Screen? Us too, and here’s how to find out more.

Use iOS 17’s Check In Feature to Reduce Worry

/in /by

We’ve all had a friend or family member say, “Text me when you get home,” because they want the peace of mind from knowing you arrived safely. But what if something goes wrong—or you forget—so they never receive that text? They’ll be worried and won’t know where you are, if you’re OK, and so on.

In iOS 17, Apple has introduced the Check In feature to provide peace of mind—or in the worst case, to help emergency services. It’s conceptually simple. Before you leave to go somewhere, you create a Check In with someone—call them a safety partner—in Messages. You specify where you’re going and whether you’re driving, taking transit, or walking. Then, when you arrive, the Check In automatically ends, alerting your safety partner that you arrived. If you’re delayed en route, Check In takes that into account and extends the expected arrival time appropriately. If you fail to arrive, Check In shares your location and route with your safety partner. Also, if you make an Emergency SOS call or your iPhone or Apple Watch calls emergency services automatically during the Check In, it notifies your safety partner.

Not all situations revolve around following a specific route to a location, so Check In also supports timers. Perhaps a college student is going for an hour-long trail run and wants a friend to check on her if she’s not back as expected. She can use Check In to set a timer for 1 hour, share it with her friend, and when the timer ends, either tap the End button if she’s back or add more time if the run is going fine but taking longer than expected.

Although Check In may seem targeted at friends and family, it could have business uses as well. For instance, a destination Check In might work well for keeping tabs on a colleague traveling to a make-or-break pitch presentation.

Before you start using Check In with someone—in either direction—explain Check In to them and discuss an appropriate response if you or they fail to end Check In successfully. Responses should probably start with a quick text, followed by a phone call. If initial efforts to reach out are met with silence, contacting other people—friends, family members, neighbors, etc.—may be appropriate. At some point, depending on various factors, it will be time to call law enforcement. Of course, if the other person triggers an Emergency SOS during the Check In, call law enforcement immediately. At least in the US, if the person isn’t in your area, don’t call 911. Instead, find the law enforcement website for where the person is and call that organization’s 10-digit number. And here’s hoping it never comes to that!

Create a Check In

To get started with Check In, follow these steps:

  1. In Messages, open a conversation with the person you want to be your safety partner (Check In doesn’t currently work with group conversations).
  2. Tap the ⊕ button to the left of the message field, tap More at the bottom, and tap Check In.
  3. The first time you invoke Check In, Messages walks you through a series of explanatory screens, one of which is important—the privacy level of the data shared with your safety partner if you don’t arrive. Select Full—we can see almost no reason why you wouldn’t want that person to be able to share your exact location and route with emergency services if something has gone wrong. (If necessary, tweak this setting later in Settings > Messages > Data.)
  4. On subsequent uses of Check In, an unsent card appears in the Messages conversation, usually set for an hour in the future. The card isn’t sent automatically so you can customize it before sending it.
  5. Tap the Edit button to adjust the timer or destination.
  6. To change the timer duration, use the time picker and tap Done. Skip to the last step in this list.
  7. To set a destination instead of a timer, tap “When I arrive” at the top of the screen.
  8. Tap the Change button, and in the map, either search for a location or find one manually by pinching and zooming—touch and hold the map to drop a destination pin. At the bottom of the screen, select Small, Medium, or Large to set the size of the area in which you’ll arrive.
  9. Tap Done to close the map and then select Driving, Transit, or Walking so Check In can estimate your arrival time based on your method of transportation.
  10. If you want additional buffer time, tap Add Time and give yourself 15, 30, or 60 minutes beyond when Check In thinks you’ll arrive. This shouldn’t usually be necessary.
  11. Tap Done.
  12. Once you’re back to the Check In card in the Messages conversation, tap the Send button to start the Check In.

Note that safety partners can’t reject Check In cards.

End a Check In

Once you trigger a Check In, it can end in a few ways. First, you can cancel it before the timer completes or you arrive at your destination. Second, it can end successfully when you tap End when the timer finishes or when you arrive at your specified location. Third and finally, there’s the core purpose of the Check In, which is to alert your safety partner if you fail to respond to a timer or arrive where and when you said you would.

  • Cancel: To cancel a Check In, tap the Details button on the Check In card in Messages, tap Cancel Check In, and agree that you don’t want your safety partner notified. Timer and destination Check Ins look slightly different but act the same way. Your safety partner will only see that the Check In card in Messages says it has ended.
  • End successfully: For a timer Check In to end successfully, you must respond when the iPhone prompts you (below left). All your safety partner sees when that happens is a note in the Check In card that the timer ended (below right). You don’t need to interact with your iPhone for a destination Check In to end successfully—just arrive at the specified location. The safety partner’s Check In card updates to say that you arrived.
  • Check In fails to end (initiator): If you don’t arrive at your destination or fail to tap End when prompted, Check In gives you the option of adding time (below left) but after 15 minutes, tells you that it has alerted your safety partner (below center and right).
  • Check In fails to end (safety partner): More interesting is what your safety partner sees if you fail to complete a Check In. They’ll be alerted and can tap Details to see your location, when your devices were last unlocked, and more. They then have to figure out the best way to respond given your setup conversation.

It can take some practice to become fluid with Check In, so it’s worth testing it in everyday situations before using it when it might really matter. Once you use it a few times, you may notice Siri Suggestions offering to start it for you, making it even easier to initiate regularly. We hope you find that it provides some peace of mind and, in the worst-case scenario, helps someone in need of emergency services.

(Featured image by iStock.com/PeopleImages)

Social Media: The new Check In feature of iOS 17 can provide peace of mind by letting you specify a safety partner who will automatically be notified if you fail to arrive at your destination or complete a timer.