Your Apple Account & the Passwords App

The 60-Second Version

If you remember only a handful of things about passwords, make it these.

• Your Apple Account is your one master sign-in. Keep its password strong and private.
• Your iPhone has a Passwords app that safely stores all your other logins.
• Let the phone create and fill your passwords. You approve with Face ID or your passcode.
• A code texted to your phone is a one-time key. Never read it aloud to anyone.
• No real company, and no one claiming to be Apple, will ever call and ask for your password or a code.

What Your Apple Account Is

Before we touch passwords, let's meet the one account that runs the whole show. It used to be called your Apple ID.

Your Apple Account is the email address and password you used when you first set up your iPhone. It unlocks the App Store, your iCloud photos and backups, Find My, and your purchases. Everything Apple ties back to this one account, which is why it matters more than any other sign-in you have.

• Open Settings (the grey gear icon).
• Your name is right at the very top of the list. Tap it.
• That screen is your Apple Account: your name, email, phone number, and settings.

A Quick Health Check

A five-minute look now can save you a world of trouble later. Think of it like checking the batteries in your smoke alarm.

Open Settings and tap your name at the top. Then tap Sign-In & Security. This is where you make sure the phone can always reach you if you ever need to prove the account is yours.

• Check that your trusted phone number is correct and current.
• Make sure your account email is one you still use and can open.
• Consider adding a Recovery Contact, a trusted family member who can help you back in.
• Back on the main account page, scroll down to see the devices signed in and remove any you do not recognize.

Why Reusing a Password Is Risky

This is the single habit that gets good people into trouble. The good news is your phone makes it easy to break.

Many people use the same one or two passwords everywhere, because who can remember dozens? The trouble is that companies sometimes get broken into, and when they do, the crooks get a list of email addresses and passwords. They then try that same password on your bank, your email, and everywhere else. One leak becomes many.

• Use a different password for every account.
• Do not try to remember them. Let the Passwords app hold them for you.
• Let the phone create long, random ones. Crooks cannot guess those.
• You only need to remember two: your phone's passcode and your Apple Account password.

Meet the Passwords App

Your iPhone has a dedicated app just for your logins. It is like a locked drawer that only opens for you.

Inside, you will find a tidy list of every website and app you have saved a sign-in for, sorted A to Z. There are also sections for Passkeys, verification Codes, Wi-Fi passwords, and Security warnings. It is all in one calm, searchable place.

• Look for an app named Passwords with a key on the icon.
• Cannot find it? Swipe down the middle of the Home Screen to open Search, type Passwords, and tap it.
• When you open it, your phone asks for Face ID, Touch ID, or your passcode first.

Viewing a Saved Login

When you need to see a username or password, here is how to look it up without any fuss.

To use a password somewhere, tap and hold on it and choose Copy, then paste it where you need it. Most of the time you will not even need to do this, because the phone fills it in for you, which we will cover next.

• Open the Passwords app and unlock it with your face or passcode.
• Scroll the list, or use the search box at the top to type the website's name.
• Tap the account you want, like your bank or your email.
• You will see the user name and the password, along with the website address.

Adding a Login by Hand

Sometimes you want to save a sign-in yourself, such as one you have written in a notebook. It takes about a minute.

If you enter the website address, like chase.com, the phone will offer to fill that sign-in automatically the next time you visit. If you are not sure of the exact address, just the name is fine to start, and I can tidy it up later.

• Open the Passwords app and unlock it.
• Tap the plus sign (+), usually in a corner of the screen.
• Type the website or app name, then the user name, then the password.
• Tap Save. It now lives safely in the app and can be filled in for you.

Editing or Updating a Login

When a password changes, you update it here so the phone always fills in the right one. No more crossed-out notebook pages.

Sometimes a website asks you to set a new password. When you do, your phone usually offers to update the saved one for you, so just tap Update Password if it asks. If it does not ask, you can always edit it here by hand afterward.

• Open the Passwords app and tap the account you want to change.
• Tap Edit in the corner.
• Change the user name or password, or fix the website address.
• Tap Save (or Done). The old details are replaced with the new ones.

AutoFill: Letting the Phone Sign You In

This is the payoff for saving your passwords. Instead of typing them, your phone offers to fill them in with a tap.

When you reach a sign-in box, a little suggestion appears with your saved user name. Tap it, approve with Face ID or your passcode, and the phone types both the user name and password for you. No spelling, no squinting, no forgetting.

• Open Settings and tap General.
• Tap AutoFill & Passwords.
• Turn on AutoFill Passwords and Passkeys, and make sure Passwords is chosen underneath.
• That is it. Now the phone offers to fill your saved logins wherever you sign in.

Letting the Phone Create a Strong One

When you sign up for something new, your iPhone can invent a strong password so you never have to think one up. This is the safest kind of password there is.

A password like a birthday or a pet's name is easy for a crook to guess. A long jumble of letters and numbers is not. Because the phone remembers it for you, there is no downside to using one you could never memorize.

• When a website asks you to create a password, the phone suggests a long, random one.
• It appears in a little box that says something like Use Strong Password.
• Tap that, and the phone both fills it in and saves it for you.
• You never have to remember it. It is in your Passwords app from then on.

Passkeys, Explained Simply

A passkey is a newer, easier way to sign in with no password to type at all. It sounds fancy, but for you it is actually simpler.

Instead of a password you type, a passkey lets you sign in using your face or fingerprint, the same way you unlock your phone. There is nothing to remember and nothing to type. It is also much harder for a crook to steal, because there is no password for them to trick out of you.

• When a website offers to set up a passkey, agree to it.
• The phone saves the passkey in your Passwords app automatically.
• Next time you sign in, just look at your phone or use your fingerprint.
• You are in, with no password typed at all.

Two-Factor Sign-In and Its Codes

You have probably seen a six-digit code arrive by text when you sign in somewhere. Here is what it is and why it is a good thing.

Two-factor is simply a second check. After your password, the account sends a short code to your phone to make sure it is really you. Even if a crook somehow learned your password, they still could not get in without the code, which only comes to your phone. It is a strong lock, and it is on your side.

• If you are the one signing in right now, type the code where it asks. It is usually valid for only a few minutes.
• If a code arrives and you did NOT just try to sign in, ignore it. Someone may be testing your password.
• Never type a code into a page you reached from a link in a text or email.

Verification Codes in the Passwords App

Some accounts let you keep your changing six-digit codes right inside the Passwords app, so you never wait on a text. This is an extra, and it is optional.

For certain accounts, the code that normally arrives by text can instead be generated inside your Passwords app. When you sign in, the phone can fill both your password and the current code together, which is quick and tidy. The section for these is labeled Codes in the app.

• On the website's security settings, choose to add an authenticator or verification code.
• The site shows a square pattern or a setup key.
• Your iPhone offers to set up a verification code, or you can add it under the account in Passwords.
• From then on, the current code appears in the Passwords app, refreshing on its own.

Sharing a Password With Your Spouse

Couples often share accounts, the streaming service, the utility login, the grocery pickup. Your iPhone has a safe way to share these without texting them around.

The Passwords app lets you make a Shared Group, a trusted circle, usually just you and your spouse. Any password you put in the group is available to both of you, and it stays up to date on both phones automatically. It is far safer than writing a password in a text message.

• Open the Passwords app and look for New Shared Group (near the top or under the plus sign).
• Give it a name, like Ours, and add your spouse from your contacts.
• Move the logins you both use into the group.
• Both of you can now use and update those sign-ins, with no texting required.

Tidying Up Old Logins

Over the years, sign-ins pile up for services you no longer use. A little cleanup keeps your list easy to read.

Sometimes the same site is saved twice with slightly different details. Keep the one with the correct password and delete the other. If two logins are confusing you, that is exactly the sort of thing I can straighten out quickly on a visit.

• Open the Passwords app and tap the account you want to remove.
• Tap Edit, then scroll down and tap Delete Password.
• Confirm. It moves to a Recently Deleted area for a while before it is gone for good.
• Changed your mind? You can recover it from Recently Deleted within that window.

The Security Warnings, and What They Mean

The Passwords app quietly watches out for you and flags sign-ins that could be risky. These warnings are helpful, not alarming.

In the Passwords app there is a Security section. If it shows a number, tap it to see logins the phone is concerned about, usually passwords you have reused, ones that are easy to guess, or ones that turned up in a known company leak.

• Tap a flagged account to see why it was flagged.
• For the important ones, tap Change Password on Website and let the phone create a new strong one.
• Start with your email and bank, then work down the list at your own pace.
• There is no rush and no penalty. This is just a friendly to-do list.

No One Legitimate Will Ask for Your Code

This is the most important page in the book. Almost every account theft starts with someone talked into sharing a password or a code. You can stop it cold.

No real company will ever call, text, or email you and ask for your password or a verification code. Not Apple, not your bank, not anyone. If someone asks, the answer is always no, and hanging up is always the right move. You are never rude for protecting yourself.

• Someone calls, claiming to be from Apple, your bank, Amazon, or Microsoft.
• They sound official and say there is a problem, a charge, a hack, a locked account.
• They create a rush, then ask for your password, or for a code that just arrived by text.
• The moment you share it, they are into your account. That is the whole scam.

If You Ever Get Locked Out

It happens to everyone, a forgotten password, a new phone, a wrong guess too many times. There is always a calm way back in.

Being locked out is a nuisance, not a disaster. Because you set up your account properly, the phone can prove you are you and let you back in. The worst thing you can do is rush or hand control to a stranger who offers to help.

• For a website password, tap Forgot Password on the real site and follow the reset email or text.
• For your Apple Account, use another Apple device you own, or a trusted family member's, to reset it.
• This is where a Recovery Contact you set up earlier really pays off.
• Give it a few minutes and follow the on-screen steps. There is no shortcut worth trusting a stranger for.

Everyday Habits That Keep You Safe

You do not need to be an expert. A few simple habits handle almost everything, and your phone does the hard part for you.

If a message, a caller, or a pop-up ever leaves you uneasy about an account, that feeling is worth listening to. You are never bothering anyone by asking first. It is always cheaper and calmer to check before than to fix after.

• Let the phone create and remember your passwords, so every account has a different strong one.
• Keep just two in your head: your phone's passcode and your Apple Account password.
• Never share a password or a texted code with anyone who contacts you.
• For anything important, go to the real website yourself instead of tapping a link.
• Keep your iPhone updated, updates quietly fix security holes for you.

What's in the 27-page PDF

• Your Apple Account and a quick health check (pages 3-4)
• Why reusing passwords is risky, and the built-in Passwords app (pages 5-8)
• Adding, editing, and letting your phone fill and create passwords (pages 9-11)
• Passkeys and two-factor codes, explained plainly (pages 12-15)
• Sharing safely, tidying up, and staying safe from callers (pages 16-20)
• A cheat sheet and a plain-English word list at the back (pages 21-22)

Why I wrote this

I write these as printable handouts because a guide you can keep in a drawer beats a web page you have to find again. No jargon, no judgment, no rushing. If you'd rather have someone sit beside you and go through it together, that's a flat $99 first visit with the 30-day follow-up included — serving Portage County from Atwater, Ohio. — Bill