Is iCloud Passwords safe?

iCloud Passwords manages browser autofill settings and relays encrypted credential data to the native macOS iCloud Passwords app.

The extension disables the browser's built-in password saving and autofill on install, routing those functions through Apple's iCloud Keychain instead. A content script injected into all pages detects username and password fields, captures typed credentials, and forwards them via AES-GCM encrypted native messaging to the com.apple.passwordmanager host. Saved passwords are retrieved from the native app and filled into forms by the content script.