Apple’s Passwords app was vulnerable to phishing attacks for nearly three months after launch

https://9to5mac.com/2025/03/18/apples-passwords-app-was-vulnerable-to-phishing-attacks-for-nearly-three-months-after-launch/

The Passwords app now uses HTTPS by default for all connections, so ensure you’re running at least 18.2 on your devices! I wouldn’t be surprised if this news travels far under the radar. Share for awareness!

Reply to this note

Please Login to reply.

Discussion

Using local only password apps fixes this. It's completely ridiculous to store passwords in the cloud and expect that they will be safe. It's just too juicy of a target for hackers.