Don’t make me typeUsing Shared Web Credentials for fun and profit

Solution: Password Managers!

… right?

iCloud Keychain

Demo

Apple App Site Association File

example.com/apple-app-site-association

Entitlements

• SecRequestSharedWebCredential

• SecAddSharedWebCredential

• SecCreateSharedWebCredentialPassword

Available on iOS 8+ & tvOS 9+

Security Framework

Tips & tricks

• Works in the Simulator!

• Log onto iCloud

• Might sync slower

• Map your API envs to web app domains

Read more

• github.com/MrAlek/SharedWebCredentials

• WWDC 2014 session 506 – Your app, your website, and Safari

• Shared Web Credentials Reference

Make passwords great again!

And stop letting your users worry about them