OS X won't store Apple ID passwords in keychain, resulting in WEAK, dangerous passwords
| Originator: | karelia | ||
| Number: | rdar://18229959 | Date Originated: | 9/4/2014 |
| Status: | Resolved: | ||
| Product: | OS X | Product Version: | 10.9, 10.10 |
| Classification: | Security | Reproducible: | Always |
There are so many places where OS X won't store my Apple ID in the keychain. (I've reported this before for specific cases.) iTunes store keeps asking me to type in my password; when I log into 10.9 "Mavericks" or 10.10 "Yosemite" I am prompted for both my iCloud Apple ID and the Apple ID I use for my Messages account. Sometimes more than once. People, if you want your users to use strong passwords, why are you requiring us to type in passwords all the time, rather than letting them reside securely in your own secure keychain? Maybe if people weren't asked to type in their apple ID password all the time, they wouldn't use such weak, easy-to-guess passwords that end up getting breached and leaked.
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!