If your Mac is demanding a “keychain password” you don’t recognize — or your saved passwords seem to have vanished after an upgrade — your passwords are almost certainly not gone. They’re locked, out of sync, or sitting in a file that just needs pointing to the right place. This guide covers every major recovery scenario, from a simple password mismatch to a full iCloud Keychain restore, and ends with six habits that keep this from happening again.
Jump straight to the scenario that matches your situation, or read top to bottom if you’re not sure what went wrong.
What Is Apple Keychain (and Why You Might Lose Access to It)
<a href=”https://support.apple.com/guide/keychain-access/welcome/mac” target=”_blank” rel=”noopener noreferrer”>Apple Keychain</a> is your Mac’s built-in password manager. Every time you save a password in Safari, join a Wi-Fi network, or log into an app, Keychain quietly stores that credential and fills it in automatically next time. You never have to think about it — until something breaks.
Two distinct parts of Keychain regularly get confused:
- Local Keychain — stored only on your Mac, managed through Keychain Access (in Applications > Utilities). Think of it as the filing cabinet built into your specific machine.
- iCloud Keychain — synced across all your Apple devices through your Apple Account. If you save a password on your Mac and it shows up on your iPhone, that’s iCloud Keychain doing its job.
Common triggers for keychain issues:
- Changing your Mac login password through Recovery Mode or via an admin account, instead of through System Settings
- Migrating to a new Mac or doing a clean macOS install
- A corrupted keychain file after a failed update or forced shutdown mid-sync
- Forgetting the keychain password after a long stretch of inactivity
- iCloud Keychain sync getting interrupted or quietly turned off
Every one of these scenarios is recoverable. Let’s get into it.
Before You Start
Run through this checklist before attempting any recovery steps. Having these items ready prevents you from getting stuck partway through.
- [ ] Your current Mac login password — often the same as your keychain password by default; needed for almost every step
- [ ] Your Apple Account email and password — required for any iCloud Keychain recovery
- [ ] Access to a trusted Apple device (iPhone or iPad) — needed if two-factor authentication is required
- [ ] Your old Mac login password (if you recently changed it) — this is the key to fixing the mismatch in Scenario 1
- [ ] A Time Machine backup drive, if you have one — useful for Scenarios 2 and 3
- [ ] The name of the specific password you’re trying to recover — jot it down so you can confirm success at the end
| Requirement | Details |
|---|---|
| macOS version | macOS Ventura or later (primary scope); macOS Sequoia for the Passwords app |
| Apple Account | Required for iCloud Keychain recovery steps |
| Two-factor authentication | Must be enabled on your Apple Account for iCloud Keychain |
Before making any changes: note which passwords you’re trying to recover. Once you’ve applied a fix, you can check those specific credentials first to confirm everything is back.
Scenario 1: Forgotten or Mismatched Keychain Password
What’s happening: Your Mac keeps prompting for a “keychain password” at login or when you open an app — and the password it wants isn’t your current login password. This is a keychain mismatch, and it’s by far the most common Keychain complaint.
It almost always traces back to a login password that was changed through Recovery Mode or by an administrator. That method bypasses the sync step, so your login keychain still expects the old password.
Step 1: Open Keychain Access
Press Cmd + Space to open Spotlight, type Keychain Access, and press Return. Alternatively, go to Finder > Applications > Utilities > Keychain Access.
Step 2: Select the Login Keychain
In the left sidebar, click login under the Default Keychains section. This is the keychain causing the mismatch prompt.
Step 3: Try Changing the Keychain Password With Your Old Login Password
In the menu bar, click Edit > Change Password for Keychain “login”.
A dialog will appear asking for the current keychain password. Enter your old Mac login password — the one you used before you changed it. This resolves the problem far more often than people expect.
If it accepts the old password, you’ll be prompted to set a new keychain password. Enter your current Mac login password so the two stay in sync.
Expected result: The repeated password prompts stop at your next login.
Step 4: If the Old Password Doesn’t Work — Reset the Login Keychain
⚠️ Warning: This step deletes all passwords stored locally in your login keychain that were not synced to iCloud Keychain. Before proceeding, confirm iCloud Keychain is enabled at System Settings > [Your Name] > iCloud > Passwords & Keychain. If sync is on, your website and app passwords are already backed up in iCloud and will restore automatically. If sync is off, check Scenario 4 first to see if you can enable it before resetting.
Go to Keychain Access in the menu bar > Settings > Reset My Default Keychain. Confirm when prompted, then restart your Mac.
macOS will create a fresh, empty login keychain using your current login password. Re-enable iCloud Keychain sync (Scenario 4) to repopulate your passwords from the cloud.
Scenario 2: Passwords Missing After a Mac Upgrade or Migration
What’s happening: You upgraded to a new Mac or did a clean macOS install, and your saved passwords aren’t showing up. Migration Assistant should carry keychain files over automatically — but it doesn’t always succeed, especially if iCloud Keychain wasn’t enabled on the old machine.
Step 1: Check iCloud Keychain First
Go to System Settings > [Your Name] > iCloud > Passwords & Keychain and confirm the toggle is on.
If it was already on, wait 5–10 minutes. A large password library takes time to sync down to a new device — this isn’t something to rush.
Step 2: Check the Passwords App or Safari
On macOS Sequoia, open the Passwords app from your Applications folder and see if your credentials are already there.
On macOS Ventura or Sonoma, go to Safari > Settings (in the menu bar) > Passwords tab and authenticate to view your saved credentials.
If your passwords are already there, you’re done. They were probably just in a different place than you were looking.
Step 3: Determine Whether iCloud Keychain Was Enabled on the Old Mac
If your passwords aren’t showing up in iCloud Keychain, they may never have been synced. In that case, they still live on the old machine as a local .keychain-db file.
If you still have access to the old Mac, continue to Steps 4 and 5. If not, a Time Machine backup from that machine is your best remaining option — see the Troubleshooting section below.
Step 4: Locate the Old Keychain File
On the old Mac, open Finder. Hold the Option key, click Go in the menu bar, and select Library. Navigate to the Keychains folder.
You’ll see one or more .keychain-db files. Copy the one that corresponds to your user account to an external drive or shared folder accessible from your new Mac.
Step 5: Import the Old Keychain File on the New Mac
On the new Mac, open Keychain Access. In the menu bar, go to File > Import Items. Navigate to the .keychain-db file you copied and open it.
Keychain Access will ask for the password to unlock the imported file. Enter the old Mac’s login password. The keychain will appear in the sidebar, and you can browse its contents to find the passwords you need.
Scenario 3: Corrupted Keychain Throwing Errors
What’s happening: Keychain Access is showing errors like “The keychain cannot be found” or “An error occurred while trying to complete this operation,” or your Mac demands a keychain password no matter what you type. This usually means the keychain database file has been damaged — commonly after a failed macOS update or a forced shutdown mid-sync.
Start here, not with deletion: Always try the iCloud recovery path (Scenario 4) before touching keychain files. If iCloud Keychain was enabled, you can restore your passwords from the cloud after resetting with no permanent loss.
Step 1: Try Toggling iCloud Keychain Sync Off and On
Go to System Settings > [Your Name] > iCloud > Passwords & Keychain. Toggle sync off, wait 30 seconds, then toggle it back on. This forces a fresh sync and resolves minor corruption without any data loss. Worth trying before anything more drastic.
Step 2: Reset the Default Keychain via Settings
If toggling sync didn’t help, open Keychain Access, go to Keychain Access in the menu bar > Settings > Reset My Default Keychain.
⚠️ Warning: This deletes all locally stored passwords, certificates, and secure notes in your login keychain that were not synced to iCloud. Confirm iCloud Keychain is enabled before proceeding so your website and app passwords can be restored from the cloud. Locally stored items not in iCloud — such as certain app-specific tokens or system certificates — will not be recoverable from iCloud after this step.
Step 3: If Errors Persist — Move the Damaged File and Restart
If the reset option is greyed out or errors continue, you’ll need to move the corrupted file manually.
Open Finder, hold Option, click Go > Library, and navigate to the Keychains folder. Drag the .keychain-db file for your user account to your Desktop. This keeps a copy without removing it from the system permanently.
Restart your Mac. macOS will automatically create a fresh, clean login keychain using your current login password.
Step 4: Re-enable iCloud Keychain Sync
After the restart, go to System Settings > [Your Name] > iCloud > Passwords & Keychain and confirm sync is on. Your website and app passwords will repopulate within a few minutes.
Scenario 4: Full iCloud Keychain Recovery
What’s happening: You’ve used iCloud Keychain before, but your passwords aren’t syncing to this Mac — or you’re setting up a Mac fresh and want to pull everything down from iCloud.
This is the fastest and most complete recovery path for anyone who had iCloud Keychain enabled.
Step 1: Turn On iCloud Keychain Sync
Go to System Settings > [Your Name] > iCloud > Passwords & Keychain and toggle sync on. If prompted, approve the request from a trusted device — your iPhone or iPad will receive a notification.
Step 2: Wait for the Sync to Complete
Give it 5–10 minutes. Hundreds of saved passwords take time to download. Open the Passwords app (macOS Sequoia) or Safari > Settings > Passwords (Ventura/Sonoma) to check whether credentials are coming through.
Step 3: If Nothing Syncs — Sign Out and Back In
Go to System Settings > [Your Name], scroll to the bottom, and click Sign Out. Restart your Mac. Sign back in with your Apple Account, then re-enable iCloud Keychain sync as in Step 1.
Signing out clears stale authentication state that can silently block sync from completing. It’s an annoying extra step, but it works.
Step 4: Use Your Recovery Key (If You Set One Up)
If you previously configured an iCloud Keychain recovery key through Advanced Data Protection, you can use it to verify your identity when no other trusted device is available to approve the request. You’ll be prompted for it during the sign-in process.
If you haven’t set up a recovery key yet, the Prevention section below explains how — it’s worth doing today.
Step 5: Confirm on Another Device
On your iPhone or iPad, go to Settings > Passwords and check whether your credentials are there. If they are, the problem is specific to this Mac, not your iCloud account — which confirms that the sign-out/sign-in step in Step 3 is the right fix.
Scenario 5: Recovering One Specific Password (Wi-Fi, Website, or App)
Sometimes you don’t need a full recovery. You just need one password right now.
Finding a Website or App Password
Step 1: On macOS Sequoia, open the Passwords app from your Applications folder. Use the search bar to type the website name or app name.
Step 2: Click the matching result. Authenticate with Touch ID or your Mac login password when prompted.
Step 3: Your username and password are now visible. Click the password field to copy it.
On macOS Ventura or Sonoma, go to Safari > Settings > Passwords tab instead. The steps are the same from there.
Finding a Saved Wi-Fi Password
On macOS Sequoia: Go to System Settings > Wi-Fi. Find the network in your list of known networks and click the info (ⓘ) button next to it. If a Copy Password option appears, click it — the password is now on your clipboard.
On any macOS version (Keychain Access method): Open Keychain Access and type the network name into the search bar at the top right. Double-click the result showing AirPort network password or 802.1X Password in the Kind column.
In the detail window, check the Show Password box. Enter your Mac login password or use Touch ID when prompted. The Wi-Fi password appears in the field.
For a more detailed walkthrough, see our guide on how to find your Wi-Fi password on Mac.
Finding Passwords for Apps or System Services
Open Keychain Access and search by the app or service name. Use the Kind column to identify the entry type — application password, internet password, or generic password. Double-click the entry, check Show Password, and authenticate to reveal it.
How to Prevent Keychain Issues From Happening Again
These six habits take less than 30 minutes to set up and can save you hours of recovery work later.
1. Keep iCloud Keychain Sync Enabled at All Times
iCloud Keychain is effectively a live, automatic backup of your passwords. If your local keychain ever gets corrupted or lost, everything restores from iCloud in minutes. Check the status any time at System Settings > [Your Name] > iCloud > Passwords & Keychain.
For a full setup walkthrough, see our <a href=”https://www.switchingtomac.com/how-to-turn-off-password-suggestions-on-iphone/”>iCloud Keychain setup guide</a>.
2. Always Change Your Mac Login Password Through System Settings
This is the single most common cause of keychain mismatches. When you <a href=”https://www.switchingtomac.com/how-to-change-your-macs-password/”>change your login password</a> through System Settings > Users & Groups while logged in normally, macOS automatically updates your keychain password to match. When you reset it through Recovery Mode or via an admin account, that sync step is skipped — and the mismatch begins.
See our guide on <a href=”https://www.switchingtomac.com/how-to-change-your-macs-password/”>how to change your Mac login password</a> safely for the full walkthrough.
3. Set Up an iCloud Keychain Recovery Key
A recovery key gives you a way back into iCloud Keychain even if you lose access to all your trusted Apple devices. Without one, losing every device simultaneously could permanently lock you out of your passwords — a scenario that’s rare but not impossible.
To set one up, first enable Advanced Data Protection: go to System Settings > [Your Name] > iCloud > Advanced Data Protection. Once enabled, the recovery key option becomes available. Print it out and store it offline. Learn more in our guide on what <a href=”https://support.apple.com/en-us/108756″>Advanced Data Protection for iCloud</a> is.
4. Keep a Complementary Password Manager for Critical Accounts
iCloud Keychain is excellent, but it has one meaningful weakness: if iCloud Keychain itself becomes inaccessible, you need another way into your most important accounts. Keeping a second copy of critical credentials — Apple Account, primary email, banking — in a dedicated password manager adds a practical safety net. Look into the best password managers for Mac that work well alongside Keychain rather than replacing it.
5. Back Up Your Mac Regularly With Time Machine
Keychain files are included in every Time Machine backup. If a corrupted keychain causes you to lose locally stored passwords, you can restore the ~/Library/Keychains/ folder from a backup taken before the problem occurred. Set up Time Machine on your Mac if you haven’t already.
6. Audit Your Saved Passwords Once or Twice a Year
Open the Passwords app, scroll through your saved credentials, and delete anything you no longer use. A leaner keychain syncs faster, has fewer entries that can conflict, and is easier to scan when something goes wrong. The Passwords app also flags weak and reused passwords — worth checking while you’re in there, using the app’s full feature set.
Frequently Asked Questions
Will resetting my keychain delete all my passwords?
Only locally stored passwords that were never synced to iCloud Keychain will be lost. In practice, “local only” means passwords saved while iCloud Keychain was turned off, or certain app-specific tokens and system certificates that the Passwords app doesn’t display. If iCloud Keychain was enabled and syncing, your website and app passwords are safe in the cloud and will repopulate automatically after you reset and re-enable sync.
What’s the difference between the Passwords app and Keychain Access?
The Passwords app (macOS Sequoia and later) is the consumer-facing interface — it shows your website and app login credentials synced through iCloud Keychain, with a clean layout and a search bar. Most users will find everything they need here.
Keychain Access is the power-user tool. It shows every keychain on your Mac, including system keychains, certificates, app-specific tokens, and locally stored items that never appear in the Passwords app. You need Keychain Access for Wi-Fi password lookups on older macOS versions, keychain mismatch fixes, and manual file imports.
My Mac keeps asking for my keychain password every time I log in. How do I stop this?
Classic keychain mismatch — your login keychain password and your Mac login password are out of sync. The fix is in Scenario 1: open Keychain Access, go to Edit > Change Password for Keychain “login”, and enter your old Mac login password when prompted. If that works, set the new keychain password to match your current login password and the prompts will stop.
Can I recover passwords if I never had iCloud Keychain turned on?
Yes, but your options are narrower. Your passwords exist in a .keychain-db file on your Mac (or old Mac). If the machine is still accessible, follow Scenario 2 (Steps 4–5) to locate and import the file manually. If the machine is gone but you have a Time Machine backup, you can restore the ~/Library/Keychains/ folder from there. If neither option is available, those locally stored passwords are not recoverable — which is exactly why enabling iCloud Keychain sync is the first habit in the prevention section.
Is it safe to store passwords in Apple Keychain?
Yes. All Keychain data is encrypted using AES-256, a strong industry-standard cipher. <a href=”https://support.apple.com/en-us/HT204085″ target=”_blank” rel=”noopener noreferrer”>iCloud Keychain</a> adds end-to-end encryption on top of that — Apple cannot read your passwords, not even under a legal request. The only way to access iCloud Keychain data is with your Apple Account credentials and a trusted device. For a deeper look at the security architecture, see <a href=”https://support.apple.com/en-us/105115″ target=”_blank” rel=”noopener noreferrer”>Apple’s iCloud Keychain overview</a>.
Wrapping Up
In most cases, recovering your Mac passwords comes down to one of two things: fixing a mismatch using your old login password, or toggling iCloud Keychain sync back on. The more drastic steps — resetting or manually moving keychain files — are rarely necessary if you work through the scenarios in order. Once everything is back, the six prevention habits above (particularly keeping iCloud sync on and <a href=”https://www.switchingtomac.com/how-to-change-your-macs-password/”>changing passwords only through System Settings</a>) make it very unlikely you’ll need this guide a second time.