The iCloud Keychain is secure from outside attack. It uses advanced encryption to keep your data secure, and Apple is open about how it encrypts your data and when (though the code itself is not open source, as we’ll explain below). As for privacy, Apple can’t see your Keychain data. Though Apple’s reputation for being a privacy-first company has taken a beating recently, the logins you store on your Apple password manager are end-to-end encrypted.
No, not really. I read it as “iCloud Keychain is secure from outside attack” but not from an inside threat. The source is closed so nobody can verify Apple doesn’t actually have a backdoor in there.
This is unnecessary paranoia. While it’s true that closed source means there’s no independent verification, Apple has rejected court orders to supply the data with the response they can’t. They would be playing a very dangerous game if they’re lying
Add comment