Audit iCloud Passwords & Keychain

LowLevel 2Manual reviewmacos

Description

The iCloud Passwords & Keychain is Apple's synchronization service that works with Apple Accounts to synchronize password, passkey, and credit card information across macOS, iOS, iPadOS. The capability allows users to use synced password, passkey, and credit card information in either macOS, iOS, or iPadOS for use in Safari and other applications.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: System Settings > General > Device Management > Verify that an installed profile has Disallow iCloud Keychain Sync set to your organization's requirements. Terminal: sudo /usr/bin/osascript -l JavaScript (JXA) reading NSUserDefaults suite com.apple.applicationaccess, key allowCloudKeychainSync If the output is false, iCloud Passwords & Keychain Sync is disabled. If the output is true, iCloud Passwords & Keychain sync is enabled.

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowCloudKeychainSync.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.1.1 Audit iCloud Passwords & Keychain