{"id":3249,"date":"2011-08-26T09:00:54","date_gmt":"2011-08-26T08:00:54","guid":{"rendered":"http:\/\/blog.intego.com\/?p=3249"},"modified":"2017-01-06T15:40:36","modified_gmt":"2017-01-06T23:40:36","slug":"create-a-non-login-keychain","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/create-a-non-login-keychain\/","title":{"rendered":"Create a Non-Login Keychain"},"content":{"rendered":"

You probably use Mac OS X\u2019s keychain to store user names and passwords. This is an encrypted file that gets \u201cunlocked\u201d when you log in to your Mac, in normal circumstances, and allows software to access data belonging to you. For example, when your e-mail program wants to check for new messages, it needs to send a user name and password; it gets the password from the keychain and sends it to the mail server.<\/p>\n

By default, Mac OS X creates a keychain for you called \u201clogin,\u201d and this keychain gets unlocked as soon as you log into your Mac. This means that if you use automatic login, not only are your files accessible, but your keychain is unlocked, so anyone who accesses your Mac can get your e-mail, or even access web sites for which you have saved passwords in your keychain.<\/p>\n

The first thing to change is to turn off automatic login, which we discussed in a recent Mac security tip<\/a>. But another security precaution to take is to create a non-login keychain, so when you do log in, your keychain stays protected until you enter a password.<\/p>\n

To do this, open Keychain Access (in your \/Applications\/Utilities folder), then choose File > New Keychain <\/b> . The program will ask you to name the keychain – you could use your user name or any other name – and then a password. Don\u2019t use the same password that is assigned to your user account; the point of creating a second keychain is to have a different password in case your account is compromised.<\/p>\n


\n\"\"
\n<\/center><\/p>\n

After you\u2019ve done this and created the keychain, it will appear in the sidebar of the Keychain Access application. Next, click on the login keychain, select all the items in the right-hand section of the window, and drag them to the new keychain. You\u2019ll have to enter your password to do this. Moving these items means that they won\u2019t be unlocked when you log in, and that they\u2019ll only be available from your new keychain.<\/p>\n

When you next try to access an item in the keychain, you\u2019ll have to enter your password; not your user account password, but the one for the keychain you just created. By default, the first request unlocks the keychain, and the keychain will lock again in 5 minutes. If this is too soon, you can change the amount of time before it locks; you could choose, say, 30 minutes, so you don\u2019t have to enter your password too often. <\/p>\n

To do this, choose Edit > Change Settings for Keychain<\/b>. By default, this is set to lock again in 5 minutes. It\u2019s best to leave Lock when sleeping<\/b> checked, especially if you have a laptop. This means that whenever you close the lid of your laptop, the keychain will be locked. If anyone steals your laptop, your passwords will be protected. And, since they don\u2019t depend on the password for your user account, ever if a thief resets the password for your account, they won\u2019t be able to access your top-secret credentials. <\/p>\n


\n\"\"
\n<\/center><\/p>\n

Creating a separate keychain is the best way to protect your passwords from being discovered. Since the keychain password is different from your login password, the protection is doubled, and as long as the password isn\u2019t easy to figure out, no one will be able to access your passwords.<\/p>\n","protected":false},"excerpt":{"rendered":"

Learn how to create a new keychain that doesn’t unlock when you log into your user account. This ensures that even if someone accesses your user account and resets your password, they can’t access the credentials stored in your keychain.<\/p>\n","protected":false},"author":3,"featured_media":2488,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[10],"tags":[],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n