How to Manage Passwords with the Passwords App in iOS 18 and macOS Sequoia

Apple has finally brought out what it had hidden for years inside Settings: a password manager with its own app. The Passwords app arrived with iOS 18, iPadOS 18, macOS Sequoia 15 and visionOS 2 in September 2024, and by 2026 it is a mature tool that many people use as a direct replacement for 1Password or Bitwarden.

In this guide I’ll walk you through how to set it up, how to migrate from another manager, how to use passkeys, the built-in 2FA, secure sharing, and what happens if you also work with Windows or Android. No copy-paste from the press release: real steps and what works (and what doesn’t).

What the Passwords app is and what changes compared to iCloud Keychain

iCloud Keychain still exists underneath. The app doesn’t replace the system, it exposes it. Before, you had to go to Settings → Passwords on iPhone, or System Settings → Passwords on Mac. Now there is a dedicated icon in the Dock and on the Home Screen.

The real change is not cosmetic. Apple has added:

• Separate sections for passwords, passkeys, Wi-Fi, verification codes, and deleted passwords.
• Sharing through family or work groups with end-to-end encryption.
• A native app on Windows (via iCloud for Windows) and an extension for Chrome and Edge.
• CSV import/export, something that used to be a hassle.

Detail	Value
Launch	September 2024 (iOS 18 / macOS Sequoia 15)
iPhone requirements	iPhone with iOS 18 or later
Mac requirements	Mac with macOS Sequoia 15 or later
Windows	iCloud for Windows 15 or later
Supported browsers	Safari, Chrome, Edge (via extension)
Price	Free with any Apple ID
Encryption	End-to-end with your iCloud key

Prerequisites

Before you start, check:

• iPhone/iPad: iOS 18 or iPadOS 18 at minimum. You can see this in Settings → General → About.
• Mac: macOS Sequoia 15 or later. Apple menu → About This Mac.
• Apple ID with two-factor authentication enabled (required for iCloud Keychain).
• iCloud Keychain enabled: Settings → [your name] → iCloud → Passwords & Keychain.
• Optional but recommended: Mac login password and Face ID/Touch ID on iPhone.

If iCloud Keychain isn’t turned on, the app opens but doesn’t sync anything. It’s the first typical mistake.

First setup on iPhone

1. Open the Passwords app (grey key icon).
2. Authenticate with Face ID or Touch ID.
3. You’ll see six categories: All, Passkeys, Codes, Wi-Fi, Security, and Deleted.
4. Tap the + at the top right to add an entry manually.
5. Under Security, review leaked or reused passwords. Apple flags them with a red warning.

For Safari and other apps to use the manager automatically: Settings → General → AutoFill & Passwords → AutoFill Passwords and Passkeys → Passwords (Apple). If you have 1Password or Bitwarden installed, this is where you choose which one takes priority.

First setup on Mac

In macOS Sequoia the app is in Applications, or you can open it with ⌘ + Space and typing “Passwords”.

1. When you open it, it asks for your Mac login password.
2. Sidebar identical to the iPhone one.
3. Passwords → Settings (⌘ + ,) to configure auto-lock and the browser extension.
4. If you use Chrome or Edge, install the “iCloud Passwords” extension from the browser store. To make it work you also need iCloud for Windows if you’re on a PC, or nothing extra on a Mac.

A useful tip: you can drag the window to the side and use it as a sidebar while filling in forms. It isn’t as fast as Raycast with its 1Password extension, but it gets the job done.

Importing passwords from 1Password, Bitwarden or Chrome

This is the part Apple did late but finally works well.

From 1Password

1. In 1Password 8 for Mac: File → Export → [your vault].
2. Choose CSV format.
3. In the Passwords app on Mac: File → Import Passwords.
4. Select the CSV. You’ll see a summary of the imported and skipped entries.
5. Delete the CSV from disk immediately. It’s in plain text.

From Bitwarden

Export from the Bitwarden web app (vault.bitwarden.com) in unencrypted CSV format. Same import flow.

From Chrome

chrome://password-manager/settings → Export passwords. Chrome asks for the system password. Then import the CSV into the Passwords app.

What Apple does not import: secure notes, credit cards, identity documents. If you use 1Password for those, Apple’s app falls short.

How to use passkeys

Passkeys are the main reason to make the switch. They replace the password + 2FA with a cryptographic key stored on your device, impossible to phish.

To create a new passkey on a compatible site (Google, Amazon, PayPal, GitHub, eBay, among others):

1. Go to the account’s security settings.
2. Look for “Add passkey” or “Passkey”.
3. The system asks you to confirm with Face ID / Touch ID.
4. The passkey is saved in Passwords → Passkeys and syncs via iCloud to all your devices.

To sign in later, the site detects the passkey and asks for biometrics. Done. You don’t type anything.

Passkeys also work on Windows and Android since iOS 17, using the iPhone as a “key” via QR code and Bluetooth. Slow, but functional.

Built-in verification codes (2FA)

The app stores TOTP codes the way Google Authenticator or Authy do.

To add one:

1. On the service’s website, choose “App-based authentication”.
2. You’ll see a QR code. On iPhone: camera → scan → “Open in Passwords”. On Mac: right-click the QR → “Set up verification code”.
3. The code appears inside that password’s entry, with a countdown.
4. When Safari detects a 2FA field, it fills it in automatically.

Controversial point: having both the password and 2FA in the same manager theoretically reduces security. If someone gets hold of your Apple ID and unlock passcode, they have both. In return, you gain enormous usability. Your call.

Sharing passwords securely

Shared groups are the killer feature for families and small teams.

1. In the app, tap + or the group icon → New Shared Group.
2. Give it a name (“Family”, “Work”).
3. Add contacts from your address book (they must be on iCloud and running iOS 17 or later).
4. Move the passwords you want to share into the group.

All members see the passwords and changes sync instantly. If someone leaves the group, they lose access but the passwords are not automatically revoked. Change sensitive ones by hand.

Compared with 1Password Families (€5.99/month for 5 people) or Bitwarden Family ($3.33/month), Apple’s option is free and native. If all members are in the Apple ecosystem, there’s no debate.

Use from Windows, Android or Linux

• Windows: install iCloud for Windows 15 from the Microsoft Store. A separate “iCloud Passwords” app appears, plus the Chrome/Edge extension.
• Android: there is no official app. You can access it via iCloud.com but without AutoFill.
• Linux: only iCloud.com. Forget about AutoFill.

This is where Bitwarden still wins. If your daily routine mixes a Mac, a Pixel and a laptop running Ubuntu, Bitwarden or 1Password are more practical.

An honest comparison with 1Password and Bitwarden

Feature	Passwords (Apple)	1Password 8	Bitwarden
Price	Free	€2.99/month individual	Free / $10/year premium
Passkeys	Yes	Yes	Yes
Built-in 2FA	Yes	Yes	Premium
Secure notes	No	Yes	Yes
Cards and documents	No	Yes	Yes
Group sharing	Yes (free)	Yes (Families plan)	Yes (Families plan)
True cross-platform	Weak (Android/Linux)	Full	Full
Self-hosted	No	No	Yes (Vaultwarden)

Choose Apple Passwords if: all your devices are Apple or a mix of Mac + Windows, you want something free and well integrated, and you only need passwords, passkeys and 2FA.

Stay with 1Password/Bitwarden if: you use Android or Linux daily, you store encrypted cards/documents, you work in teams needing granular permissions, or you need access auditing.

Common problems

• “The app doesn’t show my passwords”: check that iCloud Keychain is on under Settings → [your name] → iCloud.
• “Safari doesn’t autofill”: go to Settings → General → AutoFill & Passwords and enable Passwords as an active source.
• “The Chrome extension keeps asking for a code”: on Mac, open the Passwords app at least once per session. On Windows, verify that iCloud for Windows is running.
• “I can’t import the CSV”: make sure the first row has headers (title, url, username, password). If it fails, open the CSV in Numbers and save it again.
• “Passkeys don’t sync”: check that all devices use the same Apple ID and run iOS 17 or macOS Sonoma 14 at minimum.

FAQ

Can I keep using 1Password alongside the Passwords app? Yes. Under AutoFill & Passwords you can enable several sources at once. Safari lets you choose each time you fill in.

Do passkeys work without iCloud? Not within the Apple ecosystem. Passkeys sync via iCloud Keychain. Without iCloud, they stay on a single device.

What happens if I lose access to my Apple ID? You lose access to all your passwords and passkeys. That’s why Apple requires setting up recovery contacts or a recovery key. Do it under Settings → [your name] → Sign-In & Security.

Can I export my passwords to move to another manager? Yes. On Mac: File → Export Passwords from the app. It generates a CSV. Same warning: delete it as soon as you finish the migration.

Is there an enterprise or large-team version? Not as such. Apple Business Manager lets you distribute managed accounts, but there is no password administration console like 1Password Business. For teams of more than 10 people with roles, a dedicated manager is still needed.