Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords - MacRumors
Skip to Content

Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords

Apple today informed developers that it has launched a new open source project that's designed to let those who develop password management apps create strong passwords compatible with popular websites.

1passwordgenerate
The new Password Manager Resources open source project allows password management apps to integrate website-specific requirements used by the iCloud Keychain password manager to generate strong, unique passwords.

Many password managers generate strong, unique passwords for people, so that they aren't tempted to create their own passwords by hand, which leads to easily guessed and reused passwords. Every time a password manager generates a password that isn't actually compatible with a website, a person not only has a bad experience, but a reason to be tempted to create their own password. Compiling password rule quirks helps fewer people run into issues like these while also documenting that a service's password policy is too restrictive for people using password managers, which may incentivize the services to change.

The project also features a collection of websites known to share a sign-in system, links to website pages where users can change passwords, and more, with full details available on GitHub.

Apple says that having password managers collaborate on resources like password rules and change password URLs allows all password management apps to improve their quality with less work, plus it encourages websites to use standards or emerging standards to improve their compatibility with password managers.

Popular Stories

Apple HomeView lineup feature4

Apple Announces 'HomeView' Smart Home Hub

Tuesday October 13, 2026 6:00 am PDT by
Apple today announced the "HomeView," an all-new kind of smart home hub featuring a 7-inch Liquid Retina display and Siri AI. Apple's senior vice president of Worldwide Marketing Greg Joswiak said: Apple HomeView is designed to be shared by everyone in the home yet feel completely personal to each user. It recognizes your face to shift from a household screen to your own experience,...
Apple TV 4K 4th Generation Top View5

New Apple TV 4K Announced With A19 Chip, Updated Siri Remote, More

Tuesday October 13, 2026 6:08 am PDT by
Apple today announced the fourth-generation Apple TV 4K, with key features including an A19 chip, Siri AI support, an updated Siri Remote that has Find My support with Precision Finding, built in far-field microphones, support for surround sound with four HomePods in front and rear pairs, and more. The A19 chip in the new Apple TV 4K delivers up to 50% faster CPU performance and up to twice...
iOS 26 Home Feature

RIP, homeOS

Tuesday October 13, 2026 9:39 am PDT by
MacRumors was first to reveal the name "HomeView" last week, after discovering a trademark filing from a secretive shell company that we correctly suspected was linked to Apple. Apple was likely behind a "homeOS" trademark filing as well, but the company ultimately decided to stick with generic "HomeView software" naming, just like it refers to the HomePod's operating system as "HomePod...

Top Rated Comments

kop48 Avatar
83 months ago
Any reason why the article shows the password generator from 1Password without references? :)
Score: 21 Votes (Like | Disagree)
83 months ago

there's still going to be (and are) plenty of websites that create their own stupid password rules that no password manager that generates strong passwords will be able to comply. People are still going to have to roll their own- kinda taking away the spark of this project. - But at least it's a step in the right direction.
From the way I read it, that is the goal of this project. Once enough password managers add this feature, it should not matter (from a password generation POV), what the requirements are. The password manager will know BEFORE it generates a password.

Take an example from one of the existing websites in the password-rules.json:

According to the JSON, bhphotovideo.com has a requirement of a password max length of 15 characters. Pretend you go to that website and attempt to create an account. You use the Password Generator in Safari (or any password manager), BEFORE the password generator attempts to create a complex password, it reads the JSON and finds the bhphotovideo.com URL. It then reads the requirements (Max length 15). It immediate creates a password that fits that requirement, regardless of what your defaults are. No action needed on your part to manually change the requirements (which may not be obvious on the webpage.)

The key is (a) the list of password requirements is kept up to date. Since this is published on GitHub, anyone can make a PULL request to update. I wonder what Apple's merge requirements are going to be.

(b) Password managers integrate this in to there workflow.
Score: 14 Votes (Like | Disagree)
83 months ago
The thing I’d really like to see is password generation in safari for 3rd party apps.

It’s a bit of a pain to create new accounts in 1Password with the proper url. You have to go back and forth between the app and 1Password a time or two. It’d be nice if it was more streamlined for 3rd party apps kind of like it is for keychain.
Score: 14 Votes (Like | Disagree)
NightFox Avatar
83 months ago

Any reason why the article shows the password generator from 1Password without references? :)
I'd guess that if they did reference it, people on here would be asking why they'd singled out 1Password to feature over other PWMs
Score: 13 Votes (Like | Disagree)
83 months ago

Sure. Give hackers the open source code to help people generate passwords. What can go wrong? :rolleyes:
Openness enables collaboration. Black boxes maintained by a single company aren't usually the best method for strong security. I want security that shows you exactly what its doing, has been vetted by a community of security experts, and dares the hackers to break it.
Score: 9 Votes (Like | Disagree)
83 months ago
It would be great if websites would have some consistency in their input validation and database schemas. I know one company that allows almost every special character but a comma - and the error message doesn't tell you which special character is the disallowed one. I used 1password and had to go through the generated password and remove each special character 1-by-1 to figure out which one was problematic.
"Hrm, octothorp? Nope. Modulus? Nope. Pipe? Nope. Asterisk? Nope. Greater than symbol? Nope. That just leaves the comma. What?! Seriously?"
It really is an awful experience and I can see why other users would resort to weak and/or reused passwords.
I've see other sites with very specific character length guidelines and other weird combinations. One site, which has since updated to something more secure, even once required 8-15 characters, letters and numbers only. If I were trying to brute force or guess a potentially weak password, wouldn't that make the dictionary size much smaller and thus easier to crack?
Score: 7 Votes (Like | Disagree)
Latest Stories
Didn't Pre-Order Apple's HomeView? Here's How Long the Wait is Now
Didn't Pre-Order Apple's HomeView? Here's How Long the Wait is Now
2 hours ago
Apple's $79 iPhone Duo Case Sticks On With Adhesive
Apple's $79 iPhone Duo Case Sticks On With Adhesive
2 hours ago
Apple TV 4K and HomePod Mini Price Increases 'Much More Striking' Than New Features
Apple TV 4K and HomePod Mini Price Increases 'Much More Striking' Than New Features
5 hours ago
The MacRumors Show: Was HomeView Worth the Wait?
The MacRumors Show: Was HomeView Worth the Wait?
6 hours ago
Apple Refers to HomeView as 'HomePodDevice' in Legal Document
Apple Refers to HomeView as 'HomePodDevice' in Legal Document
6 hours ago
Apple Pre-Orders Kick Off With First Discounts on HomeView and Apple TV 4K
Apple Pre-Orders Kick Off With First Discounts on HomeView and Apple TV 4K
8 hours ago
Developers Question Scope of Potential Apple Antitrust Settlement
Developers Question Scope of Potential Apple Antitrust Settlement
9 hours ago
iPhone Duo Resold for $5,000 on eBay After Selling Out
iPhone Duo Resold for $5,000 on eBay After Selling Out
9 hours ago
Massive Discounts Hit 2026 MacBook Pro With Up to $800 Off
Massive Discounts Hit 2026 MacBook Pro With Up to $800 Off
9 hours ago
iPhone Duo is Sold Out for Christmas as Shipping Estimates Slip to 2027
iPhone Duo is Sold Out for Christmas as Shipping Estimates Slip to 2027
9 hours ago
Didn't Pre-Order an iPhone Duo Yet? Wait Times Are Significant Now
Didn't Pre-Order an iPhone Duo Yet? Wait Times Are Significant Now
10 hours ago
First Apple TV 4K Pre-Order Discount Arrives at Amazon
First Apple TV 4K Pre-Order Discount Arrives at Amazon
10 hours ago
iPhone Duo Pre-Order Deals: The Best Carrier Offers From AT&T and T-Mobile
iPhone Duo Pre-Order Deals: The Best Carrier Offers From AT&T and T-Mobile
10 hours ago
iPhone Duo Now Available to Pre-Order From Apple
iPhone Duo Now Available to Pre-Order From Apple
10 hours ago
iPhone 18 Pro vs. iPhone Duo Buyer's Guide: Which Should You Choose?
iPhone 18 Pro vs. iPhone Duo Buyer's Guide: Which Should You Choose?
12 hours ago
Apple Store Down Ahead of iPhone Duo Pre-Orders
Apple Store Down Ahead of iPhone Duo Pre-Orders
13 hours ago
Oops, Apple's Website Just Hinted at iPad Mini 8
Oops, Apple's Website Just Hinted at iPad Mini 8
22 hours ago
OLED MacBook Pro Won't Get M7 Chips Until Late 2027
OLED MacBook Pro Won't Get M7 Chips Until Late 2027
1 day ago
Apple Pledged $25 Million to Trump's White House Ballroom
Apple Pledged $25 Million to Trump's White House Ballroom
1 day ago
Touchscreen MacBook Pro Could Launch on November 6
Touchscreen MacBook Pro Could Launch on November 6
1 day ago
New Withings Users Must Pay $99/Year for Apple Health Syncing
New Withings Users Must Pay $99/Year for Apple Health Syncing
1 day ago
Meta and Apple Bring Muse Spark Open AI Model to Mac Studio
Meta and Apple Bring Muse Spark Open AI Model to Mac Studio
1 day ago
iPad Mini 8: Apple Has Tested Both 60Hz and 120Hz ProMotion Displays
iPad Mini 8: Apple Has Tested Both 60Hz and 120Hz ProMotion Displays
1 day ago
Apple TV 4K 2022 vs. 2026 Buyer's Guide: All Differences Compared
Apple TV 4K 2022 vs. 2026 Buyer's Guide: All Differences Compared
1 day ago
Apple CEO John Ternus on Early Foldables: 'Kind of Cheap and Crappy'
Apple CEO John Ternus on Early Foldables: 'Kind of Cheap and Crappy'
1 day ago
Greg Joswiak Says Apple Isn't Focused on Making AI for 'Lunatic Fringe'
Greg Joswiak Says Apple Isn't Focused on Making AI for 'Lunatic Fringe'
1 day ago
Amazon Offers $120 Discount on AirPods Max 2, $50 Off AirPods Pro 3
Amazon Offers $120 Discount on AirPods Max 2, $50 Off AirPods Pro 3
1 day ago
Apple CEO John Ternus Featured on Cover of TIME Magazine: 'New Era'
Apple CEO John Ternus Featured on Cover of TIME Magazine: 'New Era'
1 day ago
Apple Announces Deadline to 'Get Ready' to Pre-Order the iPhone Duo
Apple Announces Deadline to 'Get Ready' to Pre-Order the iPhone Duo
1 day ago
MKBHD is 'Not Convinced' About Apple's New HomeView, Here's Why
MKBHD is 'Not Convinced' About Apple's New HomeView, Here's Why
1 day ago