Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

ALL of my logins and passwords available on two family member's devices. WTF Apple?!

M

Muscovite

macrumors member
Original poster
Apr 19, 2020
72
40
Pretty much the title. I actually used two devices belonging to shared family members to 'successfully' log into my gmail accounts.

Everything is shared!

Whenever there's a password prompt, my family members' iPhones handily present a nice list of all my saved passwords, autofilling the passwords.

Tested on two gmail accounts and a streaming service account.

There is of course no option to stop keychain from sharing in the family sharing options, not that it would make any sense anyway.

WTF is going on here, people?

EDIT: To avoid confusion:

  1. Both family members have their very own AppleIDs and have been logged in as such
  2. These are personal iPhones, I never used these devices to log in with my AppleID
  3. We never mix devices, I use my own mac, my wife uses her own laptop. Exclusively, there is simply no need to share physical devices.
  4. What changed recently:
    1. I subscribed to the new Apple One service and am sharing these services with all family members as the family organizer. So while both are logged in under their own AppleIDs, the Music, Arcade etc show Share by... me under the AppleID settings.
    2. Despite me sharing the Apple One, my wife is family sharing her 2TB iCloud drive plan (Apple One is limited to 200GB in my country for some reason so I couldn't do it). So under my AppleID iCloud settings I see 'Shared by... her'
All that said, there is no way I see this a bit unusual 'countersharing' setup should ever result in my personal keychain being shared with anyone.

Again, she goes to Google.com, selects Log In and up comes a list of all my email accounts. Hitting any results in a successful login. Same goes for app 'login via google' logins, website logins, etc.

Calling Apple first thing tomorrow for sure.

EDIT 2:
I am looking at my wife's iPhone right now

She is logged in under her AppleID (and has always been, for a year, on this particular device after she bought it - I never touched it)

Settings/Passwords shows ALL of my logins, websites, email accounts, the whole lot.

To add insult to injury, I went to my macOS' Keychain yesterday and just deleted EVERYTHING under

Default Keychains
- login
- iCloud
System Keychains
- System

losing email settings, wifi passwords, had to reenter the whole lot - confirmed this on my iPhone - the Settings/Password is completely empty so the deletion did sync across my ApppleID devices.

Well guess what - she still has everything as of this morning.
 
Last edited:
  • Like
Reactions: motulist, jordangrant, BornAgainMac and 2 others
yukari said:
This.
If you use the same Apple ID, your iCloud will share all the information.
Click to expand...
Of course. Everyone logged in under their very own AppleID. I never used their devices to log in using my AppleID. These are iPhones
 
Can your family users under their own Apple IDs see their own passwords under Settings > Passwords?
 
Is it only the google password that was saved? Safari may have saved that password on the devices when you logged in. Might be good as suggested to look at the keychain passwords on those devices and delete your passwords as necessary
 
Are you sharing other things amongst the family? Like Google Chrome bookmarks? If you are, then you’ve probably got passwords set to share also. My bet is your issue is thru the sharing of some other app or account.
 
VineRider said:
Is it only the google password that was saved? Safari may have saved that password on the devices when you logged in. Might be good as suggested to look at the keychain passwords on those devices and delete your passwords as necessary
Click to expand...
No. All 5 of my Google accounts arer happily presented, a website login, a streaming service login, all of them
 
Last edited:
teeshot44 said:
Are you sharing other things amongst the family? Like Google Chrome bookmarks? If you are, then you’ve probably got passwords set to share also. My bet is your issue is thru the sharing of some other app or account.
Click to expand...
We are not using Google bookmarks. And this is just something that first popped up when she was trying to 'Login via Google' to an iOS app - any other of my Website login is shown/available!
 
I have Apple One Premium and we also have a Google drive account for family photos. We all access to that. Then we have our individual drives. None of the individual accounts share any info except the shared photo one has all our individual info from the other accounts. So it’s Google. I just verified this. Another notch against Google.
 
  • Haha
  • Like
Reactions: sbailey4 and DblHelix
AdamNC said:
I have Apple One Premium and we also have a Google drive account for family photos. We all access to that. Then we have our individual drives. None of the individual accounts share any info except the shared photo one has all our individual info from the other accounts. So it’s Google. I just verified this. Another notch against Google.
Click to expand...
There is no family sharing of any kind set up in Google. And my family members do not even have a google account. I’ll look more into this today. Plus, like I said, ALL passwords are shared, not just Google.
 
Last edited:
Any news in this topic? Did you solve it? Did Apple help or address this issue?
 
Exactly the same thing happened to me. I have a fmaily plan with my parents and my sister and her child. Strangely enough the passwords on keychain shared only with my sister who lives 1000 miles away. I have never used her phone. Used thr same Apple ID or anything. We did update to Apple One though. Really concerning from a security perspective. I was on the phone with Apple support for like 5 hours. They did not seem concerned whatsoever. When I suggested a class action lawsuit the customer support specialist said. Yeah maybe that would be the thing to do. 🤷‍♂️. Gives me a ton of confidence. Thanks Apple
 
  • Like
  • Wow
Reactions: jordangrant, antiprotest, MadeTheSwitch and 1 other person
ctav said:
Exactly the same thing happened to me. I have a fmaily plan with my parents and my sister and her child. Strangely enough the passwords on keychain shared only with my sister who lives 1000 miles away. I have never used her phone. Used thr same Apple ID or anything. We did update to Apple One though. Really concerning from a security perspective. I was on the phone with Apple support for like 5 hours. They did not seem concerned whatsoever. When I suggested a class action lawsuit the customer support specialist said. Yeah maybe that would be the thing to do. 🤷‍♂️. Gives me a ton of confidence. Thanks Apple
Click to expand...
Class action lawsuit? Good luck considering you and the OP are the only ones that have posted anything about this problem..
 
  • Like
  • Haha
  • Angry
Reactions: throAU, AdamNC, moyjoy and 2 others
Exact same issue here. Did anyone find a resolution or cause for this? My son is on our plan and now has access to all of my passwords when he goes to a website or app it gives him all of my options and his. Same as the OP: different apple ids, no shared accounts, etc
 
  • Haha
Reactions: AdamNC
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back