Official Chrome extension to use iCloud Keychain Passwords

The chrome extension is new for macOS? To my understanding, this is meant for Windows users. There is no point in having this when running macOS when iCloud Passwords is built-in.

DIVx0• 3 years ago

I would really love to see an official "hide my email" extension from Apple. I use this feature so much that I go out of my way to use it since I don't use Safari and that's the only integration for HME.

fieryskiff11• 3 years ago

Not really an Apple guy but this[0] came up first and its open source, have you seen it?

[0] https://github.com/dedoussis/icloud-hide-my-email-browser-ex...

mynameisvlad3• 3 years ago

I have the same feature using 1Password and Fastmail. https://1password.com/fastmail/

Bonus is that I use a separate subdomain of my custom domain for disposable email addresses which means it never fails email checks (some don't like disposable/temporary email domains).

endisneigh• 3 years ago

Doesn’t seem like a bonus. Your custom domain could just be blocked wholesale. Hide my email uses iCloud, not a separate domain. iCloud addresses probably won’t be blocked as that’s the default email given for hundred million plus Apple accounts.

jrockway• 3 years ago

I used to use an MX record that had mailinator handle nospam.jrock.us email addresses... but stopped doing it for anonymity reason. ("whois nospam.jrock.us" whoops there's my home address!)

The alternative I currently use is letting Gmail handle the spam. I used to be big into jon-foo@jrock.us for "foo" and that sort of thing, but every address ended up on every spam list anyway, and the filtering didn't increase the signal to noise ratio.

For true throwaways I just use mailinator. If I want to receive email from someone someday, I can just create another account. If they spam me, Google will filter it out. So it goes.

bradgessler• 3 years ago

It’s bonkers to me that 1Password hasn’t rolled out a first-party forwarding service yet. It’s the one thing iCloud Keychain has on them.

cj2• 3 years ago

I generated a “hide my email” forwarding address specifically for my HN profile last weekend.

Not via a chrome extension, but it’s pretty easy to generate one on any Mac (maybe even iOS?) in system settings. You can name the forwarding address to have different ones for different uses

Edit: re-read your comment and sounds like you’re already doing this manually, like me. I agree it’s a hassle and would love to see a more native UX that doesn’t involve opening system settings

herunan• 3 years ago

Not official, but this one generally works great: https://chrome.google.com/webstore/detail/icloud-hide-my-ema...

There’s also this nifty shortcut that works for both iOS and macOS: https://www.icloud.com/shortcuts/6b0c16ff0dfb4814bd881112354...

lxgr4• 3 years ago

Same for Apple Pay. Given that I mostly buy thing on my computer, and that I don't use Safari there, I basically never use it, even though I would really prefer it over entering/auto-filling my card number.

katbyte• 3 years ago

I’ll actually switch to safari explicitly for sure that support it because Apple Pay just makes it so easy/quick to buy things without accounts

DaiPlusPlus3• 3 years ago

Apple’s Hide-my-email service is only useful to people who don’t have their own domain-name for email. I assume most of here on HM have a vanity dot-com or dot-me that we just point to GMail (or maybe Office 365 if you lean that way) - all those services (not to mention self-hosted) allow us to set arbitrary, catch-all, and disposable addresses (even the perpetually un-cool O365 supports it now too).

I’ll never use Apple’s Hide-my-email service until they let us use it with our own domain-names. It’s my email mailbox and my dodgy account registration, not Apple’s.

signalblur• 3 years ago

I wouldn’t say it’s only useful for people without vanity domain names - it also adds a level anonymity should the user database get leaked (IE: it’ll be a random HME account that will look like every other, vs your specific domain name)

Also FWIW you can use it with custom domains - I use it with fastmail and have since day one (their version of it isn’t as tightly integrated as Apple but they offer this service as well). Hope this helps!

faeriechangling• 3 years ago

Hide my email is useful for avoiding linking accounts to a common identifier.

rumblestrut• 3 years ago

Oh man, I use that a lot.

dedoussis• 3 years ago

Shameless plug: I've built the unofficial "Hide My Email" browser extension [0], available both in Firefox [1] and Chromium [2]. Tried to make it as frictionless as the Safari UX, which proved to be a challenge given the lack of native HME APIs.

[0] https://github.com/dedoussis/icloud-hide-my-email-browser-ex...

[1] https://addons.mozilla.org/en-US/firefox/addon/icloud-hide-m...

[2] https://chrome.google.com/webstore/detail/icloud-hide-my-ema...

tekeous• 3 years ago

SimpleLogin is much more featured and supports extensions on all major platforms.

scorxn2• 3 years ago

Check out Firefox if you need a cross-platform browser that syncs passwords, etc. I use Windows, macOS, Linux, and iOS, and I've found Firefox to be my best option.

jdalgetty• 3 years ago

It’s my go to password manager as well but unfortunately they stopped updating it.

scorxn2• 3 years ago

The password management was reincorporated into the Firefox app, and you can tell iOS to use Firefox as your password manager. See bottom of https://support.mozilla.org/en-US/kb/end-of-support-firefox-...

jachee• 3 years ago

I want the one that stores the passwords securely in my devices’ secure enclaves whenever possible.

I also prefer the native OS browser without extra reskinned chrome (not Chrome) wrapped around it.

Firefox can’t do that.

Don’t get me wrong, I like Firefox, but I trust Apple more. Also: Firefox can’t afford to say no to the FBI.

arcanemachiner• 3 years ago

I'm pretty sure the Firefox data is E2E encrypted. As in "If you forget your password, your data is gone."

Barrin92• 3 years ago

you don't need to trust Firefox, it's open source software, and your user data is encrypted, they don't have anything to hand out.

In 50 years they really need to do a case study on what on earth Apple poured into the drinking water to provoke these kind of comparisons.

LionTamer• 3 years ago

I believe this is only for Windows

Shank• 3 years ago

macOS Sonoma (beta currently) allows it to work on macOS!

babyshake• 3 years ago

If already using Chrome's built-in password feature, is there a good reason to use this besides just wanting to use one FAANG ecosystem versus another?

azinman2• 3 years ago

It’s more geared for Apple users. I for one am really happy!!

sitzkrieg2• 3 years ago

depends on how much you believe apple marketing. but you're right, theyre all advertising companies anyway

_23sd2• 3 years ago

Chrome doesn't have a TOTP authenticator, Keychain does. I don't use that feature in any password manager but some people really love it. Keychain will sync on any Windows/Mac Chromium based browser (so Edge, Brave, etc) plus Safari, so it's a little bit less locked in than Chrome but not as good as a standalone password manager.

kstrauser• 3 years ago

Now I (using Safari) can use the upcoming iOS/iPadOS/macOS version’s shared password functions with my wife (who likes Chrome), all without a separate password manager.

We’ve used 1Password for ages, and I still like it a lot at work, but can probably get by with the built-in tools now.

eyelidlessness• 3 years ago

For users with multiple Apple devices, this should enable the same password syncing and auto gen capabilities as using Safari. For me, that means a lot less hassle using Chrome as my dev browser (otherwise when I’m prompted to create a password, I switch to Safari to create/submit it, then copy from Keychain Access, which works but it’s a PITA).

hot_gril2• 3 years ago

No, it's just an ecosystem thing.

enigmurl• 3 years ago

Allows you to sign in on (iPhone) apps a bit easier I would image

Jerry2• 3 years ago

I wish they would add Linux support. I use Linux and macOS almost 99% of the time and don't use Windows. Please Apple, make it happen.

rollcat• 3 years ago

Make that two of us!

And OpenBSD support too, while at it. (Maybe just release the source code for the native blob.)

lxgr4• 3 years ago

Huh, interesting, so this only works on Chrome on Windows and macOS?

I wonder if that's due to a technical limitation (maybe it uses an OS-native hardware secret storage mechanism that Linux does not offer), or just because Apple refuses to acknowledge the existence of Linux on the desktop.

captn3m0• 3 years ago

Last time I tried, couldn’t get it working on Linux either. As an iOS+Linux user, iCloud passwords would be great, if only it worked everywhere.

So for now, I stick with my pass setup.

westondeboer• 3 years ago

need beta os to run this.

hughw• 3 years ago

Apple/Safari cannot seem to distinguish my various AWS Cognito identities from one another. Never stopped to look into it, but Firefox and Chrome seem to have no problem understanding the difference between xxx.awscognito.com and yyy.awscognito.com.

Which is to say, I doubt I'll be using it in Chrome.

WirelessGigabit• 3 years ago

Bitwarden defaults to Base domain.

So if your credentials are stored for foo.bar.com they'll be proposed on any subdomains and the naked domain of bar.com.

You can switch it to Host. That way the credentials are only proposed on on foo.bar.com but not on cuz.bar.com.

Safari doesn't do that.

ramenmeal• 3 years ago

I've been meaning to migrate off of Lastpass, I think this would put Keychain in the mix of options. I haven't used keychain in years, is it still pretty clunky?

manuelmoreale• 3 years ago

Unfortunately yes, it still is IMO.

nielsbot• 3 years ago

Keychain Access.app hasn't changed in years. But if you're just interested in filling out passwords, then you can use the Passwords settings pane in system settings and/or the password settings screen in Safari.

robertoandred2• 3 years ago

How so?

arustad• 3 years ago

Keychain is clunky, but Passwords is better. Functionally Passwords isn’t as robust as LastPass (or 1Password) but their handling of their last security breach proved they’re not deserving of my business and getting off their service was a high priority for me.

iOS 17 and macOS Sonoma should have better 3rd party browser integration, certainly Chrome for now… hopefully Firefox in the near future.

pseudosavant• 3 years ago

"Download iCloud for Windows to use iCloud Passwords"... On Windows this requires 'iCloud for Windows'. A definite non-starter for me. There is no reason to have an extension like this call out to locally installed software for a cloud service like password management. I'm sure it can be done in JS/TS/Wasm within the context of an extension (doesn't have same-origin issue).

rzimmerman• 3 years ago

I don't know the internals, so I'm guessing, but for password sync between iCloud devices Apple might require a hardware protected key (like in a TPM). In which case it does make sense that this requires a native process running on the host. At least until that can be exposed in a meaningful way through a Web API. I doubt it's as simple as querying the iCloud servers for the plaintext password.

cavisne• 3 years ago

Pretty sure 1Password has the same constraint. Lastpass did not but well... they dont have the best reputation anymore.

tylerhou• 3 years ago

AFAIK in web TS/JS/Wasm you cannot mark memory regions as in-memory only (mlock on Linux). This means that the secrets in JavaScript can easily be leaked if the kernel decides to page V8 process memory (unencrypted) to disk.

This risk is unsuitable for an application that needs to handle sensitive credentials like an encryption key for all of a person’s passwords — or the vault itself.

Also, this is why I do not trust LastPass — they don’t run a native module, so how do I know that my vault isn’t just being stored on disk?

mark-wagner• 3 years ago

I attempted many times to use this extension under Windows. It was one of the most frustrating software installation experiences I've ever had. I never got it to work. Note that it has a 2 star review.

Perhaps Apple developers don't know how to write a Windows program but the macOS version will be usable.

Matheus28• 3 years ago

Same. Luckily (recently?) iOS added support to using Chrome’s keychain to fill in passwords. It seems you still have to open the chrome app from time to time to sync passwords, however.

judge2020• 3 years ago

Also, iOS 17 adds using your third-party password manager for using (signing challenges with) passkeys.

The only issue I can find is that you can't select two or more third-party password/passkey filling apps, unless one is "iCloud Passwords & Keychain". So if your setup is 1Password for passwords and iOS for most of your Passkeys, you can do that, but hopefully you use the same third-party passkey and password implementation.

geuis• 3 years ago

I'm honestly surprised to not only see this extension posted on HN, but for it to be upvoted so many times.

This is an old extension and I can tell you from personal experience, It doesn't work.

I do productivity and work stuff on my Macbook and have a Windows desktop machine for games and movies. I have tried for several years to figure out a solution that would let me use the iCloud keychain to store all u/p and let me use them across browsers and desktops.

I have tried every combination of uninstall/reinstall/change permissions etc with the extension on Windows 10 and it doesn't do anything.

syspec• 3 years ago

Says updated as of July 14, 2023

capableweb2• 3 years ago

I have tried for several years to figure out a solution that would let me

Pro-tip: Don't use software by companies who explicitly hate cross-platform software when you need said software to work cross-platform.

For credentials/secrets, there are other tools that actually does a really decent job at being cross-platform (including iOS/Android). Two of these are 1Password and BitWarden (FOSS as well). I'm a happy user of the former, but lots of people (including many here on HN) sing praise about the latter.

manzu• 3 years ago

Yeah It’s an old extension and doesn’t work great but it sort of works. I had to disable autocomplete in forms for it because it would break even apple’s login screen - couldn’t submit (some js error from the injected extension code). now i just use it from the button in the toolbar and that gives me the password

capableweb2• 3 years ago

I can see that it says "Offered by: Apple Inc." but beyond that, how are people supposed to see it's "official"? As far as I can tell, there are no links from apple.com/* to this extension.

pdpi• 3 years ago

Apple has documentation about using icloud passwords from Windows[1]. I tried setting it up a while back but it doesn't support Firefox. If I recall correctly, you get links to the extensions from within the icloud app on windows.

1. https://support.apple.com/en-gb/guide/icloud-windows/icw7603...

shreyas_gupta• 3 years ago

I think the extension will get updated by the time Sonoma is publicly available.

1letterunixname• 3 years ago

I purposely don't use iCloud Keychain because it's not portable to Linux, Android, and Windows. Instead, Bitwarden (setup correctly) and the Chrome browser extension. On iOS, Bitwarden can act as a total replacement for Keychain. Works on Android too.

exabrial• 3 years ago

Can this be used on a mac however?

m3kw9• 3 years ago

What could go wrong?

herdcall• 3 years ago

I've been using this with Microsoft Edge on Windows, this is so very useful. It does have autofill on the browser, but for some reason it keeps asking for password if you want to directly open it to add a password or look up something.

jgimenez• 3 years ago

I guess this is Apple's way to add Passkeys support into Chrome as well, for macOS users using Chrome, which is very common, or macOS users with an Android device.

aequitas• 3 years ago

Chrome used to have native support for Keychain back in the day when it was still growing. Then suddenly they no longer needed that feature. Glad to see this is coming back in some capacity.

specialist• 3 years ago

Cool. I'll probably use Chrome more now. I'd use Firefox full time with an extension like this.

Yes and: The Apple Passkey future can't get here soon enough.

Meanwhile, I wish Keychain allowed memo fields. Some place to record all those stupid personal security questions.

(1Password has memo fields. I switched to iCloud once I started using Apple Pay, because of integration, ubiquity.)

Also: I (officially) asked my credit union about using U2F with my account(s). No plans. This crap needs to be legislated, or some other forcing function.

grzm• 3 years ago

I use Keychain’s secure notes for security questions and the like.

Official Chrome extension to use iCloud Keychain Passwords

Related Stories