Platforms

macOS

Login Keychain storage, prompts, and how entries look in Keychain Access.

Entries go to the user's login keychain as generic passwords (apple-native-keyring-store, keychain feature). No setup is needed.

  • Where to see them: Keychain Access → login → Passwords. The Where / service column is your service name, the Account column is the account: your password account names, or kp:v1:… hashes for session records.
  • Prompts: macOS may ask the user to allow access, e.g. after the app's code signature changes (unsigned debug builds, a new signing identity). While the prompt is open the call waits; the plugin runs it on a blocking thread, so other commands keep working.
  • Locked keychain: if the login keychain is locked, the call fails with keychain locked or protected data unavailable.
  • Uninstall: deleting the app does not remove its entries.

WriteAccessibility is compiled on macOS too, but the write policy is applied only on iOS.