Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords - MacRumors
Skip to Content

Apple Launches Open Source Project to Let Password Management Apps Create Strong Passwords

Apple today informed developers that it has launched a new open source project that's designed to let those who develop password management apps create strong passwords compatible with popular websites.

1passwordgenerate
The new Password Manager Resources open source project allows password management apps to integrate website-specific requirements used by the iCloud Keychain password manager to generate strong, unique passwords.

Many password managers generate strong, unique passwords for people, so that they aren't tempted to create their own passwords by hand, which leads to easily guessed and reused passwords. Every time a password manager generates a password that isn't actually compatible with a website, a person not only has a bad experience, but a reason to be tempted to create their own password. Compiling password rule quirks helps fewer people run into issues like these while also documenting that a service's password policy is too restrictive for people using password managers, which may incentivize the services to change.

The project also features a collection of websites known to share a sign-in system, links to website pages where users can change passwords, and more, with full details available on GitHub.

Apple says that having password managers collaborate on resources like password rules and change password URLs allows all password management apps to improve their quality with less work, plus it encourages websites to use standards or emerging standards to improve their compatibility with password managers.

Popular Stories

M5 MacBook Pro

RIP, MacBook Ultra

Monday October 19, 2026 9:37 am PDT by
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name. The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
iPhone Duo Trio

Here's What Apple's Apps Look Like on the iPhone Duo

Tuesday October 20, 2026 11:12 am PDT by
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day. Many apps are shown in landscape...
apple pro tell logo

Apple Announcing New Products Next Week: 'Pro and Tell'

Monday October 19, 2026 9:05 am PDT by
Apple's Greg Joswiak today hinted at new product announcements coming next week, sharing a social media post that says "Can't wait to pro and tell next week." Rumors suggest Apple is planning to debut the new MacBook Pro with an OLED touchscreen display, an M6 entry-level MacBook Pro, an M6 iMac, an iPad mini with an OLED display. Can't wait to pro and tell next week....

Top Rated Comments

kop48 Avatar
83 months ago
Any reason why the article shows the password generator from 1Password without references? :)
Score: 21 Votes (Like | Disagree)
83 months ago

there's still going to be (and are) plenty of websites that create their own stupid password rules that no password manager that generates strong passwords will be able to comply. People are still going to have to roll their own- kinda taking away the spark of this project. - But at least it's a step in the right direction.
From the way I read it, that is the goal of this project. Once enough password managers add this feature, it should not matter (from a password generation POV), what the requirements are. The password manager will know BEFORE it generates a password.

Take an example from one of the existing websites in the password-rules.json:

According to the JSON, bhphotovideo.com has a requirement of a password max length of 15 characters. Pretend you go to that website and attempt to create an account. You use the Password Generator in Safari (or any password manager), BEFORE the password generator attempts to create a complex password, it reads the JSON and finds the bhphotovideo.com URL. It then reads the requirements (Max length 15). It immediate creates a password that fits that requirement, regardless of what your defaults are. No action needed on your part to manually change the requirements (which may not be obvious on the webpage.)

The key is (a) the list of password requirements is kept up to date. Since this is published on GitHub, anyone can make a PULL request to update. I wonder what Apple's merge requirements are going to be.

(b) Password managers integrate this in to there workflow.
Score: 14 Votes (Like | Disagree)
83 months ago
The thing I’d really like to see is password generation in safari for 3rd party apps.

It’s a bit of a pain to create new accounts in 1Password with the proper url. You have to go back and forth between the app and 1Password a time or two. It’d be nice if it was more streamlined for 3rd party apps kind of like it is for keychain.
Score: 14 Votes (Like | Disagree)
NightFox Avatar
83 months ago

Any reason why the article shows the password generator from 1Password without references? :)
I'd guess that if they did reference it, people on here would be asking why they'd singled out 1Password to feature over other PWMs
Score: 13 Votes (Like | Disagree)
83 months ago

Sure. Give hackers the open source code to help people generate passwords. What can go wrong? :rolleyes:
Openness enables collaboration. Black boxes maintained by a single company aren't usually the best method for strong security. I want security that shows you exactly what its doing, has been vetted by a community of security experts, and dares the hackers to break it.
Score: 9 Votes (Like | Disagree)
83 months ago
It would be great if websites would have some consistency in their input validation and database schemas. I know one company that allows almost every special character but a comma - and the error message doesn't tell you which special character is the disallowed one. I used 1password and had to go through the generated password and remove each special character 1-by-1 to figure out which one was problematic.
"Hrm, octothorp? Nope. Modulus? Nope. Pipe? Nope. Asterisk? Nope. Greater than symbol? Nope. That just leaves the comma. What?! Seriously?"
It really is an awful experience and I can see why other users would resort to weak and/or reused passwords.
I've see other sites with very specific character length guidelines and other weird combinations. One site, which has since updated to something more secure, even once required 8-15 characters, letters and numbers only. If I were trying to brute force or guess a potentially weak password, wouldn't that make the dictionary size much smaller and thus easier to crack?
Score: 7 Votes (Like | Disagree)
Latest Stories
Simplicity and Siri AI Are HomeView's Killer Features, Apple Says
Simplicity and Siri AI Are HomeView's Killer Features, Apple Says
12 minutes ago
iPhone Duo Reviewers Really Miss Face ID
iPhone Duo Reviewers Really Miss Face ID
5 hours ago
Does the iPhone Duo Run Hot? Here's What Reviews Found
Does the iPhone Duo Run Hot? Here's What Reviews Found
7 hours ago
Apple Music's New Look is Now Live on Apple's Website
Apple Music's New Look is Now Live on Apple's Website
7 hours ago
Anthropic Launches Claude Duet, a Proactive AI Agent
Anthropic Launches Claude Duet, a Proactive AI Agent
8 hours ago
What 32,000 Folds Did to the iPhone Duo's Hinge
What 32,000 Folds Did to the iPhone Duo's Hinge
9 hours ago
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
10 hours ago
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
11 hours ago
Apple Support App Updated for iPhone Duo's Larger Display
Apple Support App Updated for iPhone Duo's Larger Display
11 hours ago
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
11 hours ago
iPhone Duo Tips Over on MagSafe Stands When Unfolded
iPhone Duo Tips Over on MagSafe Stands When Unfolded
11 hours ago
Apple Music's New Look Officially Announced
Apple Music's New Look Officially Announced
13 hours ago
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
13 hours ago
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
14 hours ago
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
15 hours ago
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
15 hours ago
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
16 hours ago
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
20 hours ago
Apple Stores in Bordeaux and Lille Looted During French Protests
Apple Stores in Bordeaux and Lille Looted During French Protests
20 hours ago
Bluesound Adds Native Apple Music Support
Bluesound Adds Native Apple Music Support
21 hours ago
Apple CEO John Ternus Explains What Makes Good Product Design
Apple CEO John Ternus Explains What Makes Good Product Design
22 hours ago
UK Proposes New Ways to Help Apple Pay Rivals
UK Proposes New Ways to Help Apple Pay Rivals
1 day ago
WhatsApp Developing In-App Browser for All Chat Links on iPhone
WhatsApp Developing In-App Browser for All Chat Links on iPhone
1 day ago
Apple's App Store Chief Explains Its Push for Premium Games
Apple's App Store Chief Explains Its Push for Premium Games
1 day ago
Apple Could Owe Even More After $5.7 Billion Patent Verdict
Apple Could Owe Even More After $5.7 Billion Patent Verdict
1 day ago
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
1 day ago
Apple Highlights Mac and iPad Use in Paris Design Exhibition
Apple Highlights Mac and iPad Use in Paris Design Exhibition
1 day ago
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
1 day ago
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
1 day ago
Perplexity Computer Can Now Run Fully Locally on Mac
Perplexity Computer Can Now Run Fully Locally on Mac
1 day ago