Discussion and support for applications - posts about Mac OS X (e.g: network settings, Spaces & Expose, keychain, Migration Assistant, etc.) go in the Mac OS X forum.
if i lock my keychain login mail keeps asking me to unlock it. I found mail periodically asking for my mail password so after googling it and looking at the keychain app i saw that my login was unlocked and people in the forums said you should keep it always locked for security. But if I do mail will shortly after ask me to unlock it as mail is accessing it. What is the issue here?
iMac 27" i7, 8GB RAM, iPhone 3GS, Sony PSP and iPad 64gb WiFi + 3G
Ah yes, the good ol' people on the internet.
There's not really an issue: to access the contents of your keychain, it needs to be unlocked. I.e. if Mail wants your email password, which is stored in your keychain, then the keychain needs to be unlocked so Mail can use it.
Mail asking for your email password was probably a separate issue –*either the password (stored in the keychain) is wrong, or something is not quite right at the email provider end. I've seen it plenty of times, and even get it myself — it has nothing to do with the keychain.
I'd definitely leave the keychain alone though. What has it ever done to you?![]()
Yeah, my keychain is always unlocked. You still need your login password to access any of the passwords stored in it, so it's secure anyway.
Mac OS X's keychain is an encrypted file that's "unlocked" when you login to your computer.
Its more secure if your keychain password is different from your login password. For awhile my passwords were the same since it was by default.. But then I read this tip at the Mac Security Blog that suggested creating a separate keychain might actually be a better way to protect your passwords from being discovered. It's pretty easy to set up so I went ahead and did it. Not sure if your passwords are already different, just thought I'd share cause it helped me when I learned about it.
I wonder how much more real security this gives you versus the hassle of it. They say that all bets are off if someone who wants your data has physical access to your machine anyway.
I don't automatically log in on mine & have to enter my pass to wake it up or dismiss the screensaver. I can't immediately see any situation where someone who has obtained my log in password wouldn't also have the keychain pass if they really wanted it - they're both only in my head - so I can't see a real world improvement there myself.
Each to their own though of course. I don't have much of great consequence to hide.
Setting up a separate keychain called "Mail" has fixed this for me. I have to enter the password for the "Mail" keychain when I start up but never after that.
I keep my passwords in another keychain that locks after a few minutes of no use so the kids can't move extra pocket money into their accounts without me knowing.
MBP i7 2.2 & iMac 27" i5 & iPhone 3Gs & iMac intel 2006 & Macbook 2006 & Mac Mini & PM G5 & PM G4 & iPod mini
Successful Trades; ipod man, Forgie, antechinus55, new2mac