Password Store For Mac



Reset your password

Download LastPass Password Manager for macOS 10.12 or later and enjoy it on your Mac. ‎LastPass simplifies your digital life. From your LastPass vault, you can store passwords and logins, create online shopping profiles, generate strong passwords and more. Jun 08, 2020 1Password is a staple of the Apple community. It lets you store an unlimited amount of passwords, credit card numbers, addresses, and more. It uses AES 256-encryption and includes support for unlocking with Touch ID and Face ID.

Use the steps below to reset your password from any trusted iPhone, iPad, iPod touch, or Mac. You can also use a friend or family member's iPhone, iPad, or iPod touch. If that doesn't work, you may not be signed into iCloud on an eligible device or have two-factor authentication enabled for your Apple ID. Follow these steps instead.

On your iPhone, iPad, or iPod touch

  1. Go to Settings.
  2. Tap [your name] > Password & Security > Change Password.
  3. If you are signed into iCloud and have a passcode enabled, you will be prompted to enter the passcode for your device.
  4. Follow the onscreen steps to update your password.

On your Mac

With macOS Catalina:

  1. Choose Apple menu  > System Preferences, then click Apple ID.
  2. Click Password & Security.
  3. If you're asked to enter your Apple ID password, click 'Forgot Apple ID or password' and follow the onscreen instructions. You can skip the final steps below.
  4. Click Change Password. Before you can reset your Apple ID password, you'll be required to enter the password you used to unlock your Mac.

With macOS Mojave, High Sierra, or Sierra:

  1. Choose Apple menu  > System Preferences, then click iCloud.
  2. Choose Account Details.
  3. If you're asked to enter your Apple ID password, click 'Forgot Apple ID or password' and follow the onscreen instructions. You can skip the final steps below.
  4. Click Security > Reset Password or Change Password. Before you can reset your Apple ID password, you'll be required to enter the password you used to unlock your Mac.

Use a trusted phone number, trusted email, or a recovery key

In some cases, you may be able to reset your password using a trusted phone number and trusted email. If you use a recovery key for account security, you can use it to help reset your password on your iPhone, iPad, or iPod touch. Learn more about using a recovery key.

If you can't access any of your devices

You can reset your Apple ID password on a friend or family member's iPhone, iPad, or iPod touch using the Apple Support app or the Find My iPhone app.

Use the Apple Support app

To reset your password using the Apple Support app on a friend or family member's iPhone, iPad, or iPod touch with iOS 12 or later, the device owner will need to download the Apple Support app.

Ask the device owner to open the App Store on their iPhone, iPad, or iPod touch, then search for Apple Support and download the app. Then open the Apple Support app and follow these steps:

  1. Under Topics, tap Passwords & Security.
  2. Tap Reset Apple ID password.
  3. Tap Get Started, then tap 'A different Apple ID.'
  4. Enter the Apple ID that you need to reset the password for.
  5. Tap Next, then follow the steps on your screen until you receive confirmation that your Apple ID password is changed.

Any information that you enter will not be stored on the device.

Password storage for mac

Use the Find My iPhone app

If your friend or family member uses iOS 9 through 12 and they can't download the Apple Support app, use the Find My iPhone app instead.

Mac
  1. Open the Find My iPhone app.
  2. When a Sign In screen appears, make sure the Apple ID field is empty. If you see someone else's user name, erase it.
  3. Tap Forgot Apple ID or Password, then follow the onscreen steps.

Don't see a Sign In screen? Tap Sign Out. After you sign out, make sure the Apple ID field is empty. Then tap Forgot Apple ID or Password, and follow the onscreen steps.

If you tried the previous steps or live in a country or region where Support App is not available, you can still reset your password and regain access to your account with account recovery. In some cases, you might have the option to speed up the account recovery process or reset your password immediately by verifying a six-digit code sent to your primary email address. Learn more about account recovery.

If you can't change or reset your password

If you tried the previous steps and were unable to change or reset your password, you may not be signed into iCloud on an eligible device or have two-factor authentication enabled for your Apple ID. You'll need to try these steps instead.

Accounts with or without security questions

  1. Go to your Apple ID account page and click 'Forgot Apple ID or password.'
  2. Enter your Apple ID. Did you forget your Apple ID?
  3. Select the option to reset your password, then choose Continue.
  4. Choose how to reset your password:
    • If you have an account with security questions set up, you can select 'Answer security questions' and follow the rest of the steps.
    • To get email instead, select 'Get an email.' To reset your password, use the email that we send to your primary or rescue email address. Didn't get the email?
    • If asked for a Recovery Key, use the steps for two-factor authentication or two-step verification instead.

After you reset your password, you'll be asked to sign in again with your new password. You also might need to update your password in Settings on your devices.

Accounts with two-step verification

  1. Go to your Apple ID account page and click 'Forgot Apple ID or password.'
  2. Enter your Apple ID, select the option to reset your password, then choose Continue. Did you forget your Apple ID?
  3. Enter your Recovery Key for two-step verification.*
  4. Choose a trusted device.* We'll send your device a verification code.
  5. Enter the verification code.
  6. Create a new password, then select Reset Password.

After you reset your password, you'll be asked to sign in again with your new password. You also might need to update your password in Settings on your devices.

* If you permanently lost your Recovery Key or access to your trusted device, you can't change your password.

Get more help

  • To reset your password, you need to know the email address for your Apple ID. Don't know the email address for your Apple ID?
  • If you still can't sign in with your Apple ID and password, make sure that you entered the correct Apple ID. In most cases, your Apple ID is also the primary email address of your Apple ID account.
  • In some cases, you might be able to speed up the account recovery process or reset your password immediately by verifying a six-digit code sent to your primary email address.
  • Still need help? Contact Apple Support.

Introducing pass

Password management should be simple and follow Unix philosophy. With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the password. These encrypted files may be organized into meaningful folder hierarchies, copied from computer to computer, and, in general, manipulated using standard command line file management utilities.

pass makes managing these individual password files extremely easy. All passwords live in ~/.password-store, and pass provides some nice commands for adding, editing, generating, and retrieving passwords. It is a very short and simple shell script. It's capable of temporarily putting passwords on your clipboard and tracking password changes using git.

You can edit the password store using ordinary unix shell commands alongside the pass command. There are no funky file formats or new paradigms to learn. There is bashcompletion so that you can simply hit tab to fill in names and commands, as well as completion for zsh and fish available in the completion folder. The very active community has produced many impressive clients and GUIs for other platforms as well as extensions for pass itself.

The pass command is extensively documented in its man page.

Using the password store

We can list all the existing passwords in the store:

And we can show passwords too:

Or copy them to the clipboard:

There will be a nice password input dialog using the standard gpg-agent (which can be configured to stay authenticated for several minutes), since all passwords are encrypted.

We can add existing passwords to the store with insert:

This also handles multiline passwords or other data with --multiline or -m, and passwords can be edited in your default text editor using pass edit pass-name.

The utility can generate new passwords using /dev/urandom internally:

It's possible to generate passwords with no symbols using --no-symbols or -n, and we can copy it to the clipboard instead of displaying it at the console using --clip or -c.

And of course, passwords can be removed:

If the password store is a git repository, since each manipulation creates a git commit, you can synchronize the password store using pass git push and pass git pull, which call git-push or git-pull on the store.

You can read more examples and more features in the man page.

Setting it up

To begin, there is a single command to initialize the password store:

Here, ZX2C4 Password Storage Key is the ID of my GPG key. You can use your standard GPG key or use an alternative one especially for the password store as shown above. Multiple GPG keys can be specified, for using pass in a team setting, and different folders can have different GPG keys, by using -p.

We can additionally initialize the password store as a git repository:

If a git repository is initialized, pass creates a git commit each time the password store is manipulated.

There is a more detailed initialization example in the man page.

Download

The latest version is 1.7.3.

Ubuntu / Debian

Fedora / RHEL

openSUSE

Gentoo

Arch

Macintosh

The password store is available through the Homebrew package manager:

FreeBSD

Tarball

The tarball contains a generic makefile, for which a simple sudo make install should do the trick.

Git Repository

You may browse the git repository or clone the repo:

Password

All releases are tagged, and the tags are signed with 0xA5DE03AE.

Data Organization

Usernames, Passwords, PINs, Websites, Metadata, et cetera

The password store does not impose any particular schema or type of organization of your data, as it is simply a flat text file, which can contain arbitrary data. Though the most common case is storing a single password per entry, some power users find they would like to store more than just their password inside the password store, and additionally store answers to secret questions, website URLs, and other sensitive information or metadata. Since the password store does not impose a scheme of it's own, you can choose your own organization. There are many possibilities.

Password Store For Mac Computers

One approach is to use the multi-line functionality of pass (--multiline or -m in insert), and store the password itself on the first line of the file, and the additional information on subsequent lines. For example, Amazon/bookreader might look like this:

This is the preferred organzational scheme used by the author. The --clip / -c options will only copy the first line of such a file to the clipboard, thereby making it easy to fetch the password for login forms, while retaining additional information in the same file.

Another approach is to use folders, and store each piece of data inside a file in that folder. For example Amazon/bookreader/password would hold bookreader's password inside the Amazon/bookreader directory, and Amazon/bookreader/secretquestion1 would hold a secret question, and Amazon/bookreader/sensitivecode would hold something else related to bookreader's account. And yet another approach might be to store the password in Amazon/bookreader and the additional data in Amazon/bookreader.meta. And even another approach might be use multiline, as outlined above, but put the URL template in the filename instead of inside the file.

The point is, the possibilities here are extremely numerous, and there are many other organizational schemes not mentioned above; you have the freedom of choosing the one that fits your workflow best.

Extensions for pass

In order to faciliate the large variety of uses users come up with, pass supports extensions. Extensions installed to /usr/lib/password-store/extensions (or some distro-specific variety of such) are always enabled. Extensions installed to ~/.password-store/.extensions/COMMAND.bash are enabled if the PASSWORD_STORE_ENABLE_EXTENSIONS environment variable is true Read the man page for more details.

Store

The community has produced many such extensions:

Password Store For Mac Computers

  • pass-tomb: manage your password store in a Tomb
  • pass-update: an easy flow for updating passwords
  • pass-import: a generic importer tool from other password managers
  • pass-extension-tail: a way of printing only the tail of a file
  • pass-extension-wclip: a plugin to use wclip on Windows
  • pass-otp: support for one-time-password (OTP) tokens

Compatible Clients

The community has assembled an impressive list of clients and GUIs for various platforms:

  • passmenu: an extremely useful and awesome dmenu script
  • qtpass: cross-platform GUI client
  • Android-Password-Store: Android app
  • passforios: iOS app
  • pass-ios: (older) iOS app
  • passff: Firefox plugin
  • browserpass: Chrome plugin
  • Pass4Win: Windows client
  • pext_module_pass: module for Pext
  • gopass: Go GUI app
  • upass: interactive console UI
  • alfred-pass: Alfred integration
  • pass-alfred: Alfred integration
  • simple-pass-alfred: Alfred integration
  • pass.applescript: OS X integration
  • pass-git-helper: git credential integration
  • password-store.el: an emacs package
  • XMonad.Prompt.Pass: prompt for Xmonad

Migrating to pass

To free password data from the clutches of other (bloated) password managers, various users have come up with different password store organizations that work best for them. Some users have contributed scripts to help import passwords from other programs:

  • 1password2pass.rb: imports 1Password txt or 1pif data
  • keepassx2pass.py: imports KeepassX XML data
  • keepass2csv2pass.py: imports Keepass2 CSV data
  • keepass2pass.py: imports Keepass2 XML data
  • fpm2pass.pl: imports Figaro's Password Manager XML data
  • lastpass2pass.rb: imports Lastpass CSV data
  • kedpm2pass.py: imports Ked Password Manager data
  • revelation2pass.py: imports Revelation Password Manager data
  • gorilla2pass.rb: imports Password Gorilla data
  • pwsafe2pass.sh: imports PWSafe data
  • kwallet2pass.py: imports KWallet data
  • roboform2pass.rb: imports Roboform data
  • password-exporter2pass.py: imports password-exporter data
  • pwsafe2pass.py: imports pwsafe data
  • firefox_decrypt: full blown Firefox password interface, which supports exporting to pass

Password Store For Mac Os

Credit & License

Password Store For Mac Catalina

pass was written by Jason A. Donenfeld of zx2c4.com and is licensed under the GPLv2+.

Contributing

This is a very active project with a healthy dose of contributors. The best way to contribute to the password store is to join the mailing list and send git formatted patches. You may also join the discussion in #pass on Freenode.