Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords - MacRumors
Skip to Content

Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords

Apple today informed developers that it has launched a new open source project that's designed to let those who develop password management apps create strong passwords compatible with popular websites.

1passwordgenerate
The new Password Manager Resources open source project allows password management apps to integrate website-specific requirements used by the iCloud Keychain password manager to generate strong, unique passwords.

Many password managers generate strong, unique passwords for people, so that they aren't tempted to create their own passwords by hand, which leads to easily guessed and reused passwords. Every time a password manager generates a password that isn't actually compatible with a website, a person not only has a bad experience, but a reason to be tempted to create their own password. Compiling password rule quirks helps fewer people run into issues like these while also documenting that a service's password policy is too restrictive for people using password managers, which may incentivize the services to change.

The project also features a collection of websites known to share a sign-in system, links to website pages where users can change passwords, and more, with full details available on GitHub.

Apple says that having password managers collaborate on resources like password rules and change password URLs allows all password management apps to improve their quality with less work, plus it encourages websites to use standards or emerging standards to improve their compatibility with password managers.

Popular Stories

Liquid Glass App Store Feature

Apple Requiring Developers to Disclose Location Sharing and Dating Features in Apps

Monday November 2, 2026 4:43 pm PST by
Starting November 16, Apple will require developers to disclose whether their apps include real-world location sharing or dating features so age ratings can be assigned appropriately. Apple says the Dating and Relationships disclosure is required for apps that allow dating or relationship connections, regardless of whether that's with a real person or a virtual companion that engages in...
iOS 28 AI

Apple Taking New Approach to Developing iOS 28 and macOS 28

Sunday November 8, 2026 7:42 am PST by
Apple has made a change to its development process for iOS 28, macOS 28, and corresponding software updates, according to Bloomberg's Mark Gurman. In his Power On newsletter today, he said Apple separates development of each year's new operating systems into three major stages. Typically, he said each stage consists of four weeks of coding followed by a four-week "convergence" period where...
apple pro tell logo

Apple Launching Two More New Products This Friday

Monday November 9, 2026 4:22 am PST by
The Apple launches keep coming! The company is set to release two new products on Friday, November 13: the all-new Apple HomeView and the fourth-generation Apple TV 4K, both of which have been available to pre-order since mid-October. Apple HomeView: Apple's new smart home display, powered by Apple Intelligence with Siri AI, for entertainment and managing the home. Available in tabletop and...

Top Rated Comments

kop48 Avatar
84 months ago
Any reason why the article shows the password generator from 1Password without references? :)
Score: 21 Votes (Like | Disagree)
84 months ago

there's still going to be (and are) plenty of websites that create their own stupid password rules that no password manager that generates strong passwords will be able to comply. People are still going to have to roll their own- kinda taking away the spark of this project. - But at least it's a step in the right direction.
From the way I read it, that is the goal of this project. Once enough password managers add this feature, it should not matter (from a password generation POV), what the requirements are. The password manager will know BEFORE it generates a password.

Take an example from one of the existing websites in the password-rules.json:

According to the JSON, bhphotovideo.com has a requirement of a password max length of 15 characters. Pretend you go to that website and attempt to create an account. You use the Password Generator in Safari (or any password manager), BEFORE the password generator attempts to create a complex password, it reads the JSON and finds the bhphotovideo.com URL. It then reads the requirements (Max length 15). It immediate creates a password that fits that requirement, regardless of what your defaults are. No action needed on your part to manually change the requirements (which may not be obvious on the webpage.)

The key is (a) the list of password requirements is kept up to date. Since this is published on GitHub, anyone can make a PULL request to update. I wonder what Apple's merge requirements are going to be.

(b) Password managers integrate this in to there workflow.
Score: 14 Votes (Like | Disagree)
84 months ago
The thing I’d really like to see is password generation in safari for 3rd party apps.

It’s a bit of a pain to create new accounts in 1Password with the proper url. You have to go back and forth between the app and 1Password a time or two. It’d be nice if it was more streamlined for 3rd party apps kind of like it is for keychain.
Score: 14 Votes (Like | Disagree)
NightFox Avatar
84 months ago

Any reason why the article shows the password generator from 1Password without references? :)
I'd guess that if they did reference it, people on here would be asking why they'd singled out 1Password to feature over other PWMs
Score: 13 Votes (Like | Disagree)
84 months ago

Sure. Give hackers the open source code to help people generate passwords. What can go wrong? :rolleyes:
Openness enables collaboration. Black boxes maintained by a single company aren't usually the best method for strong security. I want security that shows you exactly what its doing, has been vetted by a community of security experts, and dares the hackers to break it.
Score: 9 Votes (Like | Disagree)
84 months ago
It would be great if websites would have some consistency in their input validation and database schemas. I know one company that allows almost every special character but a comma - and the error message doesn't tell you which special character is the disallowed one. I used 1password and had to go through the generated password and remove each special character 1-by-1 to figure out which one was problematic.
"Hrm, octothorp? Nope. Modulus? Nope. Pipe? Nope. Asterisk? Nope. Greater than symbol? Nope. That just leaves the comma. What?! Seriously?"
It really is an awful experience and I can see why other users would resort to weak and/or reused passwords.
I've see other sites with very specific character length guidelines and other weird combinations. One site, which has since updated to something more secure, even once required 8-15 characters, letters and numbers only. If I were trying to brute force or guess a potentially weak password, wouldn't that make the dictionary size much smaller and thus easier to crack?
Score: 7 Votes (Like | Disagree)
Latest Stories
Apple Chip Supplier TSMC Approves $1 Billion AI Investment
Apple Chip Supplier TSMC Approves $1 Billion AI Investment
2 hours ago
Make Apple Watch Listen for Sounds Like the Doorbell
Make Apple Watch Listen for Sounds Like the Doorbell
3 hours ago
'Apple Support Community' Permanently Closing on November 20
'Apple Support Community' Permanently Closing on November 20
10 hours ago
Apple's Holiday Gift Guide Highlights iPhone Duo and More
Apple's Holiday Gift Guide Highlights iPhone Duo and More
12 hours ago
Three Workers Die at Tata iPhone Parts Plant in India
Three Workers Die at Tata iPhone Parts Plant in India
13 hours ago
iCloud Mail, Calendar, Contacts and More Experiencing Outage [Updated]
iCloud Mail, Calendar, Contacts and More Experiencing Outage [Updated]
14 hours ago
Apple's Claris Testing 'Harbor' App for Local AI on Macs
Apple's Claris Testing 'Harbor' App for Local AI on Macs
14 hours ago
iFixit's PROLED MacBook Pro Teardown Reveals Logo LEDs
iFixit's PROLED MacBook Pro Teardown Reveals Logo LEDs
15 hours ago
10 Free iPhone Duo Apps Worth Downloading
10 Free iPhone Duo Apps Worth Downloading
17 hours ago
Apple Releases New AirPods Firmware
Apple Releases New AirPods Firmware
17 hours ago
Amazon Begins Early Black Friday Sale, Featuring Sitewide Discounts on Tech and Decor
Amazon Begins Early Black Friday Sale, Featuring Sitewide Discounts on Tech and Decor
20 hours ago
Apple Announces Swift Student Challenge Ahead of WWDC 2027
Apple Announces Swift Student Challenge Ahead of WWDC 2027
20 hours ago
Next iPad Air Likely to Have These 10 New Features
Next iPad Air Likely to Have These 10 New Features
20 hours ago
iPad Mini 2021 vs. 2026 Buyer's Guide: Is It Worth Upgrading?
iPad Mini 2021 vs. 2026 Buyer's Guide: Is It Worth Upgrading?
20 hours ago
New Apple TV Sign Language Feature Announced
New Apple TV Sign Language Feature Announced
21 hours ago
Disable Touch on MacBook Pro PROLED XDR and When Using Sidecar
Disable Touch on MacBook Pro PROLED XDR and When Using Sidecar
21 hours ago
Anker's Early Black Friday Sale Surprises With Mystery Boxes and Big Discounts
Anker's Early Black Friday Sale Surprises With Mystery Boxes and Big Discounts
22 hours ago
Apple Arcade Adding These Four Games in December
Apple Arcade Adding These Four Games in December
22 hours ago
OLED iPad Air Rumored to Launch in Two Sizes in Early 2027
OLED iPad Air Rumored to Launch in Two Sizes in Early 2027
1 day ago
The Original iPod Went on Sale 25 Years Ago Today
The Original iPod Went on Sale 25 Years Ago Today
1 day ago
Apple Maps Could Factor Parking Into Your Arrival Time
Apple Maps Could Factor Parking Into Your Arrival Time
1 day ago
Waze Now Alerts Drivers to Nearby Cyclists Using Garmin LiveTrack
Waze Now Alerts Drivers to Nearby Cyclists Using Garmin LiveTrack
1 day ago
iPhone 20 Pro: Ten Big Changes That Could Redefine Apple's Flagship
iPhone 20 Pro: Ten Big Changes That Could Redefine Apple's Flagship
1 day ago
Here's What Apple Fixed in iOS 27.2.1 and macOS 27.2.1
Here's What Apple Fixed in iOS 27.2.1 and macOS 27.2.1
2 days ago
Webex Gets iPhone Duo Support
Webex Gets iPhone Duo Support
2 days ago
Meta's Muse AI Agent Comes to Apple Watch
Meta's Muse AI Agent Comes to Apple Watch
2 days ago
Anker Launches Eufy Security Cam With Auto-Tracking Light
Anker Launches Eufy Security Cam With Auto-Tracking Light
2 days ago
macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools
macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools
2 days ago
Anthropic Launches Claude Fable 5.2 and Mythos 5.2
Anthropic Launches Claude Fable 5.2 and Mythos 5.2
2 days ago
Apple Releases macOS Golden Gate 27.2.1
Apple Releases macOS Golden Gate 27.2.1
2 days ago