Post

Replies

Boosts

Views

Activity

Reply to macOS Authorization Plugin: Keychain Error -25308 When Storing Password
Thanks for the response! Apologies for the formatting issues earlier; this is my first post. I wanted to ask for more insights into achieving the passwordless feature for my MFA module. Specifically, my approach is to use the Keychain to securely store the user's password and fetch it later for authentication. I'm using kSecAttrAccessibleAfterFirstUnlock because I assumed that once the user unlocks the device after a restart (using their password), I would then be able to access the Keychain to retrieve the stored password. Am I misunderstanding how kSecAttrAccessibleAfterFirstUnlock works in the context of an authorization plugin? Or is there a better way to securely store and retrieve the password for this use case? Looking forward to your suggestions!
1d