Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords

Apple today informed developers that it has launched a new open source project that's designed to let those who develop password management apps create strong passwords compatible with popular websites.

1passwordgenerate
The new Password Manager Resources open source project allows password management apps to integrate website-specific requirements used by the iCloud Keychain password manager to generate strong, unique passwords.

Many password managers generate strong, unique passwords for people, so that they aren't tempted to create their own passwords by hand, which leads to easily guessed and reused passwords. Every time a password manager generates a password that isn't actually compatible with a website, a person not only has a bad experience, but a reason to be tempted to create their own password. Compiling password rule quirks helps fewer people run into issues like these while also documenting that a service's password policy is too restrictive for people using password managers, which may incentivize the services to change.

The project also features a collection of websites known to share a sign-in system, links to website pages where users can change passwords, and more, with full details available on GitHub.

Apple says that having password managers collaborate on resources like password rules and change password URLs allows all password management apps to improve their quality with less work, plus it encourages websites to use standards or emerging standards to improve their compatibility with password managers.

Popular Stories

Liquid Glass App Store Feature

Apple Requiring Developers to Disclose Location Sharing and Dating Features in Apps

Monday November 2, 2026 4:43 pm PST by
Starting November 16, Apple will require developers to disclose whether their apps include real-world location sharing or dating features so age ratings can be assigned appropriately. Apple says the Dating and Relationships disclosure is required for apps that allow dating or relationship connections, regardless of whether that's with a real person or a virtual companion that engages in...
apple pro tell logo

Apple Launching Five New Products Today

Thursday November 5, 2026 12:59 am PST by
Apple is launching five new products on Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models. The following new products will be available from today: iPad mini with OLED display and A20 Pro chip iMac with M6 chip 14-inch MacBook Pro with M6 chip 14-inch MacBook Pro with OLED touchscreen 16-inch MacBook Pro with OLED...
duo aquarium

More Fun iPhone Duo Apps: 30 New Picks to Try

Friday November 6, 2026 3:27 pm PST by
When the iPhone Duo launched, we shared a list of some of the fun apps developers created for the new form factor. Two weeks out, developers are continuing to come up with fresh ideas, so we thought we'd share some of our favorites. Games Marbles Unhinged ($2.99) - Marbles Unhinged is a marble maze designed for the Duo. When you fold it, the floor turns into a ramp. If you stand the top...

Top Rated Comments

kop48 Avatar
84 months ago
Any reason why the article shows the password generator from 1Password without references? :)
Score: 21 Votes (Like | Disagree)
84 months ago

there's still going to be (and are) plenty of websites that create their own stupid password rules that no password manager that generates strong passwords will be able to comply. People are still going to have to roll their own- kinda taking away the spark of this project. - But at least it's a step in the right direction.
From the way I read it, that is the goal of this project. Once enough password managers add this feature, it should not matter (from a password generation POV), what the requirements are. The password manager will know BEFORE it generates a password.

Take an example from one of the existing websites in the password-rules.json:

According to the JSON, bhphotovideo.com has a requirement of a password max length of 15 characters. Pretend you go to that website and attempt to create an account. You use the Password Generator in Safari (or any password manager), BEFORE the password generator attempts to create a complex password, it reads the JSON and finds the bhphotovideo.com URL. It then reads the requirements (Max length 15). It immediate creates a password that fits that requirement, regardless of what your defaults are. No action needed on your part to manually change the requirements (which may not be obvious on the webpage.)

The key is (a) the list of password requirements is kept up to date. Since this is published on GitHub, anyone can make a PULL request to update. I wonder what Apple's merge requirements are going to be.

(b) Password managers integrate this in to there workflow.
Score: 14 Votes (Like | Disagree)
84 months ago
The thing I’d really like to see is password generation in safari for 3rd party apps.

It’s a bit of a pain to create new accounts in 1Password with the proper url. You have to go back and forth between the app and 1Password a time or two. It’d be nice if it was more streamlined for 3rd party apps kind of like it is for keychain.
Score: 14 Votes (Like | Disagree)
NightFox Avatar
84 months ago

Any reason why the article shows the password generator from 1Password without references? :)
I'd guess that if they did reference it, people on here would be asking why they'd singled out 1Password to feature over other PWMs
Score: 13 Votes (Like | Disagree)
84 months ago

Sure. Give hackers the open source code to help people generate passwords. What can go wrong? :rolleyes:
Openness enables collaboration. Black boxes maintained by a single company aren't usually the best method for strong security. I want security that shows you exactly what its doing, has been vetted by a community of security experts, and dares the hackers to break it.
Score: 9 Votes (Like | Disagree)
84 months ago
It would be great if websites would have some consistency in their input validation and database schemas. I know one company that allows almost every special character but a comma - and the error message doesn't tell you which special character is the disallowed one. I used 1password and had to go through the generated password and remove each special character 1-by-1 to figure out which one was problematic.
"Hrm, octothorp? Nope. Modulus? Nope. Pipe? Nope. Asterisk? Nope. Greater than symbol? Nope. That just leaves the comma. What?! Seriously?"
It really is an awful experience and I can see why other users would resort to weak and/or reused passwords.
I've see other sites with very specific character length guidelines and other weird combinations. One site, which has since updated to something more secure, even once required 8-15 characters, letters and numbers only. If I were trying to brute force or guess a potentially weak password, wouldn't that make the dictionary size much smaller and thus easier to crack?
Score: 7 Votes (Like | Disagree)
Latest Stories
Siri AI Rumored to Become 'More Like an Agent' as Early as Next Year
Siri AI Rumored to Become 'More Like an Agent' as Early as Next Year
2 hours ago
Apple Taking New Approach to Developing iOS 28 and macOS 28
Apple Taking New Approach to Developing iOS 28 and macOS 28
4 hours ago
Early Apple Black Friday Deals on Apple Watch, MacBook Air, and More
Early Apple Black Friday Deals on Apple Watch, MacBook Air, and More
23 hours ago
'Backglow' Lets You Customize New MacBook Pro's Glowing Apple Logo
'Backglow' Lets You Customize New MacBook Pro's Glowing Apple Logo
23 hours ago
Top Stories: Apple Product Launches, iOS 27.3 Beta, and More
Top Stories: Apple Product Launches, iOS 27.3 Beta, and More
1 day ago
More Fun iPhone Duo Apps: 30 New Picks to Try
More Fun iPhone Duo Apps: 30 New Picks to Try
2 days ago
Hands-On With Apple's New OLED Touchscreen MacBook Pro
Hands-On With Apple's New OLED Touchscreen MacBook Pro
2 days ago
Apple Store With All-New Design Opening Soon in Southern California
Apple Store With All-New Design Opening Soon in Southern California
2 days ago
Control the Glowing Apple Logo on Your New MacBook Pro
Control the Glowing Apple Logo on Your New MacBook Pro
2 days ago
Apple Shares New 'Apple Card: Apply and Use in Minutes' Ad
Apple Shares New 'Apple Card: Apply and Use in Minutes' Ad
2 days ago
Apple Says More Than 100,000 Apps Optimized for iPhone Duo, Here's What's Still Missing
Apple Says More Than 100,000 Apps Optimized for iPhone Duo, Here's What's Still Missing
2 days ago
Early Black Friday Deals Kickoff With Steep Discounts on Apple Watch Ultras and More
Early Black Friday Deals Kickoff With Steep Discounts on Apple Watch Ultras and More
2 days ago
The MacRumors Show: iOS 27.3 Looks Like a Huge Update
The MacRumors Show: iOS 27.3 Looks Like a Huge Update
2 days ago
Best Buy's Black Friday Event Begins With Sitewide Savings on Apple, TVs, More
Best Buy's Black Friday Event Begins With Sitewide Savings on Apple, TVs, More
2 days ago
Apple Releasing Yet Another Two New Products Next Week
Apple Releasing Yet Another Two New Products Next Week
2 days ago
MacBook Air Drops to Lowest Price in Months With Amazon's $250 Discount
MacBook Air Drops to Lowest Price in Months With Amazon's $250 Discount
2 days ago
Apple Rumored to Drop the iPhone's Action Button Next Year
Apple Rumored to Drop the iPhone's Action Button Next Year
2 days ago
Apple's Extended Return Policy Now in Effect for 2026 Holiday Season
Apple's Extended Return Policy Now in Effect for 2026 Holiday Season
2 days ago
Apple Music Classical Updated With New Icon and Refreshed Design
Apple Music Classical Updated With New Icon and Refreshed Design
2 days ago
OLED iPad Mini, M6 iMac, and New MacBook Pros Available From Today
OLED iPad Mini, M6 iMac, and New MacBook Pros Available From Today
2 days ago
Apple Surveys iPhone Duo Buyers About Crease and Camera
Apple Surveys iPhone Duo Buyers About Crease and Camera
3 days ago
Apple's First Touchscreen Mac is Now Arriving to Customers
Apple's First Touchscreen Mac is Now Arriving to Customers
3 days ago
Claude Gets Personal Finance Feature With Bank Account Linking
Claude Gets Personal Finance Feature With Bank Account Linking
3 days ago
Apple Arcade Adds Crossy Road Rush and NBA 2K27
Apple Arcade Adds Crossy Road Rush and NBA 2K27
3 days ago
Apple's New HomeView Smart Home Hub: Here's How Much RAM It Has
Apple's New HomeView Smart Home Hub: Here's How Much RAM It Has
3 days ago
iPad Mini vs. iPad Air Buyer's Guide: Now Just $50 Apart
iPad Mini vs. iPad Air Buyer's Guide: Now Just $50 Apart
3 days ago
First iOS 27.3 and macOS Golden Gate 27.3 Public Betas Now Available
First iOS 27.3 and macOS Golden Gate 27.3 Public Betas Now Available
3 days ago
Apple Announces a New Mac Sales Record
Apple Announces a New Mac Sales Record
3 days ago
Paid $200 for Logic Pro? Apple Says You Won't Get This New Feature
Paid $200 for Logic Pro? Apple Says You Won't Get This New Feature
3 days ago
Instagram's Edits Video Editor is Now Available on Mac
Instagram's Edits Video Editor is Now Available on Mac
3 days ago