How to import your old passwords into the new Apple Passwords

AppleInsider

Apple now has an official password manager, but importing your old passwords from other apps into Apple Passwords can be a bit of a pain.

Any password manager can import to Apple Passwords, so long as you have a Mac.

The introduction of iOS 18 and macOS Seqouia has seen the old iCloud Keychain be rolled into the new Apple Passwords app, alongside a few other Apple password management features. If you already use a password manager outside of iCloud Keychain, you'll probably want to import your passwords if you intend on using Apple Passwords.

Do note that Apple's new Passwords app is really built for storing login passwords. It does not, as yet, store the items like credit card numbers, software serial numbers, or secure documents, that other password managers too.

Plus there is a problem with importing your passwords into Apple Passwords. If you don't have access to a Mac, it's not going to happen.

Despite the fact that Apple Passwords is available on macOS, iOS, and iPadOS alike, a pre-existing password list can only be imported via the macOS version of the app. If you do own a Mac, though, importing your passwords takes just a few steps.

How to import passwords into Apple Passwords

If you use a password manager already, the first step you'll need to take is downloading your password list from whatever service you use. You'll also need to make sure you download the list as a .csv file, a Comma-Separated Values one.

So long as you can get ahold of a .csv file from your current password manager, you can import to Apple Passwords.

Once you have the .csv file from your password manager, you only have a few more steps to take.

1. Open Apple Passwords.


2. In the Menu Bar, click File.


3. Under File, click Import Passwords


4. Click Choose File.


5. Select the .csv file you downloaded from your password manager.

Once you have the .csv file selected, your passwords will import into Apple Passwords. After the process finishes, Apple Passwords will let you look through any passwords that couldn't be imported.

The Passwords app does not do a great job of explaining exactly why certain passwords have not been imported correctly. All you can do is open your old password manager and manually copy the errant login across.

It's also worth noting that not every password you have will import correctly. You may find some crop up without an email or username attached, so keep your old password manager around for at least a few months in case you have to go back to it.

Once your passwords are imported into Apple Passwords, the last step you ought to take is deleting the .csv file from your old password manager. The .csv file contains all of your passwords in plain text, and it's best not to have that sort of thing around.



Read on AppleInsider

xyzzy-xxx

I won't use any password manager that puts my data into any cloud in order to synchronize. Using Safe+ synchronization is done via WiFi and data is kept on my devices.

wtxnitz

passwords is pathetic. barely one step above the abysmal keychain. D --

as noted, it lacks many features of better managers

in particular, the import 'function' discussed.

yes, the imported file must be .csv - a major danger to leave around.
but other managers have a similar requirement, because every one has a proprietary format

but when you try to import you get something like 'can't import, bad format'
ok, fair enough. what format does it need  to be.
check help - what help?
'you can import your passwords' period!
no format.  nothing.

as for icloud - some p/ws can go there. comics, forums, etc
nothing sensitive 

MplsP

I'm still on Sonoma so I haven't tried the MacOS version but the iPhone password app leaves much to be desired in my short perusal. It's certainly a huge leap forward from the old keychain app in terms of usability but is woefully lacking in features compared to other password apps on the market. No secure notes and no credit card/payment information were the first things I noticed.

As far as cloud storage, I haven't checked the details but if the only thing that's transferred is an encrypted file with no local key then I'm fine with it - it's really no different than your encrypted passwords being sent when you log in to a web site. Likewise, CSV is a standard format - if you leave it laying around, that's your own fault. 

appleinsideruser

Passwords might be weak on features, but it’s very strong on security. Do some research on the tech before assuming it’s insecure.

xyzzy-xxx

appleinsideruser said:

Passwords might be weak on features, but it’s very strong on security. Do some research on the tech before assuming it’s insecure.

Passwords had a bug (CVE-2024-44204) which cloud enable VoiceOver to read aloud a user's saved passwords. iCloud (which is used by Passwords for syncing data between devices) had a bug in connection with the Mac Calendar App which could expose iCloud data.

appleinsideruser

xyzzy-xxx said:

appleinsideruser said:

Passwords might be weak on features, but it’s very strong on security. Do some research on the tech before assuming it’s insecure.

Passwords had a bug (CVE-2024-44204) which cloud enable VoiceOver to read aloud a user's saved passwords. iCloud (which is used by Passwords for syncing data between devices) had a bug in connection with the Mac Calendar App which could expose iCloud data.

Yup. Sadly bugs are a part of life. https://www.digitaltrends.com/computing/stop-using-lastpass-says-security-firm/

chasm

xyzzy-xxx said:

I won't use any password manager that puts my data into any cloud in order to synchronize. Using Safe+ synchronization is done via WiFi and data is kept on my devices.

Then you don't understand how Apple's iCloud works (or how easy it can be to intercept Wi-Fi signals).

Apple doesn't get "your passwords." They get an encrypted file they can't open. The passwords can only be decrypted on device.

By all means, keep using Safe+ if you prefer it. There are several high-quality password managers around (not you, Lastpass). But the Apple Passwords app has the security you say is important, and much more importantly it will get your mom and dad and other people who didn't grow up to be computer nerds to FINALLY use an organized password system.

4810

Bloody hell. Can the world's most valuable company not get passwords sorted? Everything Apple does is two steps behind and half assed.

Hedware

4810 said:

Bloody hell. Can the world's most valuable company not get passwords sorted? Everything Apple does is two steps behind and half assed.

So true time and time again. 

jdw

I've never used iCloud Keychain nor will I use the new Apple Passwords, and not because I don't want to.  I refuse to enable STUPID 2-Factor Authentication, which is Apple's unfortunate requirement for both.  And no, I could NOT care less if some of you like 2FA and swear by it.  Your personal likes don't magically make me like it, nor will a Master Thesis written about why 2FA should be enabled.  Nope.  I know the benefits, but I refuse to use that bothersome nonsense.

I can use 1Password (standalone version, not the STUPID monthly fee subscription version) without 2FA (I purchased a license for iOS and for my Mac), and I can store the encrypted file in Dropbox, making it available across ALL my devices.  It's the best solution overall and has been for many years.

oakie

or... just keep using your old PWM and have Passwords remember the new entry until all of your passwords are correctly transferred over.

I trust Apple over 1Password. first off, 1P reneged on their deal when subscriptions opened up, eventually shaving all of the features off the "lifer" version we had paid for. trust them with my data? besides, Apple has a lot to lose I they're ever truly breached (social engineering and guessing your password don't count) while 1Password can rely on trapping subs.

it's definitely not a highly featured application, Passwords, but it does just enough for me and nothing more, and does it securely, for now. and it's $10/month saved.

oakie

but the truth doesn't support their preconceived biases.

appleinsideruser said:

Passwords might be weak on features, but it’s very strong on security. Do some research on the tech before assuming it’s insecure.

xyzzy-xxx

chasm said:

xyzzy-xxx said:

I won't use any password manager that puts my data into any cloud in order to synchronize. Using Safe+ synchronization is done via WiFi and data is kept on my devices.

Then you don't understand how Apple's iCloud works (or how easy it can be to intercept Wi-Fi signals).

Apple doesn't get "your passwords." They get an encrypted file they can't open. The passwords can only be decrypted on device.

By all means, keep using Safe+ if you prefer it. There are several high-quality password managers around (not you, Lastpass). But the Apple Passwords app has the security you say is important, and much more importantly it will get your mom and dad and other people who didn't grow up to be computer nerds to FINALLY use an organized password system.

I understand how iCloud works and I use it for non sensitive data.
Apple's Calendar had a bug that was only recently fixed, allowing decrypted access to iCloud data. Apple's Passwords app had a bug to allow Siri to read aloud your passwords.
A cloud put your data online – this is an additional risk no matter what encryption is used.
Wi-Fi can be intercepted locally – but here also applies that data is encrypted twice (by WiFi and by the password manager) and it's a much lower risk than putting your data in the cloud.

bulk001

The biggest challenge with Passwords is that there is no option to separate the password from your default for the phone / Mac. If I am wrong, educate me. But if your phone password is compromised then it seems all your passwords are compromised. 1Password requires a separate password to access the app and the only reason I still use it. 

appleinsideruser

bulk001 said:

The biggest challenge with Passwords is that there is no option to separate the password from your default for the phone / Mac. If I am wrong, educate me. But if your phone password is compromised then it seems all your passwords are compromised. 1Password requires a separate password to access the app and the only reason I still use it. 

So by the same token, if your 1Password is compromised... Ultimately there has to be some sort of a key, code, face, finger, passkey, Yubico etc. I don't have an answer to your question, but wanted to share that idea.

oakie

clearly, the employees reflect their users.

Hedware said:

4810 said:

Bloody hell. Can the world's most valuable company not get passwords sorted? Everything Apple does is two steps behind and half assed.

So true time and time again. 

jdw said:

I've never used iCloud Keychain nor will I use the new Apple Passwords, and not because I don't want to.  I refuse to enable STUPID 2-Factor Authentication, which is Apple's unfortunate requirement for both.  And no, I could NOT care less if some of you like 2FA and swear by it.  Your personal likes don't magically make me like it, nor will a Master Thesis written about why 2FA should be enabled.  Nope.  I know the benefits, but I refuse to use that bothersome nonsense.

chasm

bulk001 said:

The biggest challenge with Passwords is that there is no option to separate the password from your default for the phone / Mac. If I am wrong, educate me. But if your phone password is compromised then it seems all your passwords are compromised. 1Password requires a separate password to access the app and the only reason I still use it. 

Why would your iPhone password be compromised? Don't iPhones have TouchID/FaceID? Why would you ever type in your iPhone password in a public place, or really ever?

I can't remember the last time I had to type in my iPhone (or MacBook Pro) password. I just use the FaceID (iPhone, iPad) or TouchID (MBP -- come on Apple, FaceID for MBPs please!).

That said, I agree with you that Apple should offer the option to have a separate unlock password/biometric scan for the Passwords app. That's a good idea, and I hope you'll suggest it to Apple.