{"slug": "icloud-keychain-apple-passwords-support-for-linux", "title": "iCloud Keychain (Apple Passwords) Support for Linux", "summary": "A new open-source tool called iCloud Keychain for Linux lets users access their Apple passwords on Linux machines without a Mac. The project, built with AI assistance, downloads passwords into an encrypted local store and provides a browser extension for autofill, though it remains untested with Advanced Data Protection enabled.", "body_md": "Use your iCloud Keychain passwords on Linux - no Mac required. Sign in with your Apple ID and\n`icp`\n\nregisters this computer as one of your Apple devices, then downloads your passwords into a\nprivate, encrypted store on your machine. A browser extension fills them in for you, just like the\nPasswords app on a Mac or iPhone. Your Hide My Email addresses show up too.\n\nNote:Most of this project was written with AI assistance (and reviewed by a human). It works with my own Apple account, but that's no guarantee it will work with yours. Your passwords never leave your computer, and nothing is ever changed in your Apple account -`icp`\n\nonly reads.\n\nThis is also\n\nuntestedwith Advanced Data Protection enabled. Any help with this will be appreciated - let me know if you have any issues with ADP enabled (also lmk if it works). Please don't spam escrow attempts!\n\nAn **anisette server** running on your machine. Apple's sign-in needs a small piece of data that\nonly Apple's own software can produce; the anisette server provides it locally. Start one with\nDocker (or Podman) - it keeps running in the background:\n\n```\ndocker run -d --restart=always -p 6969:6969 dadoum/anisette-v3-server:latest\n```\n\nYou only have to do this once. (If you run it somewhere other than the default\n`http://localhost:6969`\n\n, set `ICP_ANISETTE_URL`\n\nto its address.)\n\nYou will also need this repo. Clone it / download it as you wish.\n\nFrom the project folder:\n\n```\npython3 -m venv .venv && .venv/bin/pip install -e .\nsource .venv/bin/activate\nicp login\n```\n\nThis will walk you through the login: enter your Apple ID, password, and the 2FA code Apple\nsends to your other devices. `icp`\n\nthen asks for a **device passcode or iCloud Security Code** so\nit can join your keychain.\n\n- You're only asked for your password and 2FA code\n**once**.`icp`\n\nshould stay signed in for a year after this. - The passcode step is\n**important and can't be undone**: entering the wrong passcode too many times (about 10) will permanently lock your keychain recovery. One correct entry is perfectly safe. - Your 2FA code and passcode are used immediately and\n**never saved**. Your password is kept** encrypted on your computer**(in your login keyring) so`icp`\n\ncan stay signed in without asking you again - it never leaves your machine. Your access tokens and passwords are stored the same way.\n\n```\nicp show\n```\n\nOpens a full-screen list - start typing to filter, **Enter** to reveal a password,\n**Esc** to quit. Add a word to search directly, or `--plain`\n\nfor plain text:\n\n```\nicp show github\n```\n\nThe `extension/`\n\nfolder works in Chromium based browsers and Firefox.\n\n-\nOpen your browser's extensions page (e.g.\n\n`chrome://extensions`\n\n,`helium://extensions`\n\n) and turn on**Developer mode**. -\nClick\n\n**Load unpacked** and choose the`extension/`\n\nfolder. Copy the**Extension ID** it shows. -\nConnect the extension to\n\n`icp`\n\nby running:\n\n```\nhost/install.sh <EXTENSION_ID>\n```\n\n-\nReload the extension. Click its toolbar icon - you'll see the logins for the current site.\n\n-\nOpen\n\n`about:debugging#/runtime/this-firefox`\n\n, click**Load Temporary Add-on...**, and choose`extension/manifest.json`\n\n. (Firefox removes temporary add-ons when it restarts, so you'll need to re-load it after restarting.) -\nConnect it to\n\n`icp`\n\n:\n\n```\nhost/install.sh\n```\n\n-\nClick the toolbar icon to see logins for the current site.\n\nIf you ever move this project to a different folder, just run `host/install.sh`\n\nagain.\n\n- On a sign-in page, click the username or password box - an\n**iCloud Passwords** dropdown appears with matching logins. Click one to fill it in (it handles email-first pages like Google too). - Start typing to narrow the list.\n- Or click the extension's toolbar icon and pick a login there.\n\nYour passwords are a snapshot, so new or changed ones need a refresh. This happens\n**automatically** in the background whenever the snapshot is more than 6 hours old - you don't have\nto do anything. To refresh right now:\n\n```\nicp sync\nlogin    sign in, join your iCloud Keychain, and download your passwords\nshow     browse and search your passwords and Hide My Email addresses\nsync     refresh your passwords now\nlogout   sign out (use --wipe-device to also forget this device)\n```\n\nThe GrandSlam sign-in flow is adapted from [JJTech's reference](https://gist.github.com/JJTech0130/049716196f5f1751b8944d93e73d3452).\nThe keychain decryption, Octagon trust join, and CloudKit transport follow\n[OpenBubbles/rustpush](https://github.com/OpenBubbles/rustpush), cross-checked against\n[Apple's open-source Security code](https://github.com/apple-oss-distributions/Security). Hide My\nEmail is ported from [dedoussis's browser extension](https://github.com/dedoussis/icloud-hide-my-email-browser-extension).\nMachine data is provided by the SideStore ecosystem's `anisette-v3-server`\n\n. See `RESEARCH.md`\n\nfor\nhow it all works.", "url": "https://wpnews.pro/news/icloud-keychain-apple-passwords-support-for-linux", "canonical_source": "https://github.com/Sank6/iCloud-Keychain-for-Linux", "published_at": "2026-07-18 13:12:53+00:00", "updated_at": "2026-07-18 13:21:06.574325+00:00", "lang": "en", "topics": ["developer-tools", "ai-tools"], "entities": ["Apple", "iCloud Keychain", "Linux", "Docker", "Podman", "Chromium", "Firefox"], "alternates": {"html": "https://wpnews.pro/news/icloud-keychain-apple-passwords-support-for-linux", "markdown": "https://wpnews.pro/news/icloud-keychain-apple-passwords-support-for-linux.md", "text": "https://wpnews.pro/news/icloud-keychain-apple-passwords-support-for-linux.txt", "jsonld": "https://wpnews.pro/news/icloud-keychain-apple-passwords-support-for-linux.jsonld"}}