iCloud Password Extension #144

dbrewood · 2024-01-26T12:12:02Z

Install the extension and try to sign it into iCloud via authentication. You are informed you must be using macOS Sonoma and are asked to download it.
I'm running macOS Sonoma :)

dbrewood · 2024-01-27T08:47:56Z

I don't have this issue with Brave or Vivaldi.....

claudiodekker · 2024-01-27T14:44:56Z

This has to do with that a NativeMessagingHosts file isn't being created for Chromium, but does for those other browsers.

To fix this you can copy the com.apple.passwordmanager.json from Vivaldi/Brave's NativeMessagingHosts folder into Chromium's, or simply run the following command in Terminal:

echo '{
    "name": "com.apple.passwordmanager",
    "description": "PasswordManagerBrowserExtensionHelper",
    "path": "/System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper",
    "type": "stdio",
    "allowed_origins": [
        "chrome-extension://pejdijmoenmkgeppbflobdenhhabjlaj/",
        "chrome-extension://mfbcdcnpokpoajjciilocoachedjkima/"
    ]
}' > ~/Library/Application\ Support/Chromium/NativeMessagingHosts/com.apple.passwordmanager.json

dbrewood · 2024-01-27T20:54:53Z

Thanks that has indeed fixed the issue. Surely though there should not be a need to fix this?

Cubik65536 · 2024-01-27T21:00:02Z

Thanks that has indeed fixed the issue. Surely though there should not be a need to fix this?

This is an issue of vanilla Chromium (you may already discovered), as ungoogled-chromium wants to stay as close as possible to vanilla, we might not fix it here. I do recommend you to report this to Chromium dev directly though.

Wrong info due to lack of prior research, check #144 (comment) for more info.

PF4Public · 2024-02-27T13:56:40Z

Does the proposed solution adequately fix this issue, can we close it?

dbrewood · 2024-02-27T14:51:09Z

I can't say as I stopped using the program.

PF4Public · 2024-02-27T15:06:04Z

Well, let's consider it solved for now then.

dbrewood · 2024-02-27T15:09:25Z

To clarify, running the script above did indeed fix the problem, although I still think a permanent fix needs to be incorporated into the program itself. The need for manual fixes like this having to be applied is why I stopped using it.

Cubik65536 · 2024-02-27T15:29:55Z

To clarify, running the script above did indeed fix the problem, although I still think a permanent fix needs to be incorporated into the program itself. The need for manual fixes like this having to be applied is why I stopped using it.

NativeMessagingHosts should be installed by the extension rather than the browser, there’s absolutely nothing we can do, neither actually Chromium devs, you should report this to Apple if what you want is a permanent fix, otherwise I could only suggest you to use the temporary fix or stop using browsers that Apple haven’t considered at the first place.

Cubik65536 · 2024-02-27T15:32:12Z

Reference: keeweb/keeweb@e674607 (another password manager that uses NativeMessagingHosts)

dbrewood · 2024-02-27T17:23:17Z

Interesting, I can't see that Apple have considered Vivaldi or Brave and they both work.

Cubik65536 · 2024-02-27T18:10:30Z

Interesting, I can't see that Apple have considered Vivaldi or Brave and they both work.

Let me correct myself: "~~absolutely nothing~~ no proper way".

Brave points their location to Chrome (code). Which:

Chromium doesn't, obviously.
They actually shouldn't do that. (I shall remind you this involves permission settings, permission to access passwords, I don't think anyone wants to share these kinds of permissions across different applications, especially when you don't even realize it's shared)

I could assume that Vivaldi do the same.

And I will go strongly against adding this for UGC. For the reason described above.

But, everyone can have a different standard for "proper way", other browser's dev thinks it's okay to share these hosts, it's not how I think, especially considering the nature of UGC.

dbrewood · 2024-02-27T18:43:19Z

Fair enough I understand your position.

xcrap · 2024-10-26T14:10:15Z

This is happening to be, i noticed it happened after installing several browsers to try, I already had arc but installed Vivaldi and Chrome Canary, after removing and going back to this extension this happened and the terminal command makes nothing, any ideias ?

decal · 2024-11-06T21:30:11Z

How's about for the Chromium that's packaged with Burp Suite?

chefnaphtha · 2025-04-04T20:44:27Z

the workaround stopped working in the latest macos update

only difference i can see is that my google chrome (which works) has files in both in /Library/... and ~/Library/..., while chromium is ONLY in ~/Library/..., i.e. google chrome is installed system-wide. the com.apple.passwordmanager.json for google chrome is ONLY the root library dir, not the per-user dir

com.apple.passwordmanager.json exists in both NativeMessagingHosts, same content

magn2o · 2025-04-05T19:32:53Z

As of macOS 15.4, it appears that Apple introduced strict checking of signing-identifier and team-identifier in /System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper (which you can verify through hex editing). There are a list of specific whitelisted identifiers, which, unfortunately ungoogled-chromium is not part of.

As far as I can tell, the list of whitelisted browsers are:

signing-identifier	team-identifier
com.google.Chrome	EQHXZ8M8AV0U
com.google.Chrome.beta	EQHXZ8M8AV0W
com.google.Chrome.canary	EQHXZ8M8AV0T
com.microsoft.edgemac	UBF8T346G90Y
com.microsoft.edgemac.Beta	UBF8T346G90X
com.microsoft.edgemac.Dev	UBF8T346G90
com.microsoft.edgemac.Canary	UBF8T346G90R
org.mozilla.firefox	43AQ936H960b
org.mozilla.firefoxdeveloperedition	43AQ936H960R
org.mozilla.nightly	43AQ936H960Y
company.thebrowser.Browser	S6N382Y83G0P
com.brave.Browser	KL8N8XSYF40R
com.vivaldi.Vivaldi	4XF3XNRN6Y0V
com.operasoftware.Opera	A2P9LX4JPN0X
com.operasoftware.OperaGX	A2P9LX4JPN0

Cubik65536 · 2025-04-05T19:35:52Z

As of macOS 15.4, it appears that Apple introduced strict checking of signing-identifier and team-identifier in /System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper (which you can verify through hex editing). There are a list of specific whitelisted identifiers, which, unfortunately ungoogled-chromium is not part of.

As far as I can tell, the list of whitelisted browsers are:
signing-identifier team-identifier
com.google.Chrome EQHXZ8M8AV0U
com.google.Chrome.beta EQHXZ8M8AV0W
com.google.Chrome.canary EQHXZ8M8AV0T
com.microsoft.edgemac UBF8T346G90Y
com.microsoft.edgemac.Beta UBF8T346G90X
com.microsoft.edgemac.Dev UBF8T346G90
com.microsoft.edgemac.Canary UBF8T346G90R
org.mozilla.firefox 43AQ936H960b
org.mozilla.firefoxdeveloperedition 43AQ936H960R
org.mozilla.nightly 43AQ936H960Y
company.thebrowser.Browser S6N382Y83G0P
com.brave.Browser KL8N8XSYF40R
com.vivaldi.Vivaldi 4XF3XNRN6Y0V
com.operasoftware.Opera A2P9LX4JPN0X
com.operasoftware.OperaGX A2P9LX4JPN0

Unfortunately, it will probably impossible for us to get on that white list since ungoogled-chromium is literally signed with my personal account, and the chance of Apple trusting "me" is... let's say 0 :(

chefnaphtha · 2025-04-05T19:39:44Z

sad. if anyone's looking for an alternative i switched to bitwarden (vaultwarden) and while it's not as pretty and integrated it works fine

Cubik65536 · 2025-04-05T19:45:11Z

Yeah it is sad, and other browsers (like Zen) also has this problem, we all hope that we'll come to a solution at some point.

CaptainWynn · 2025-04-05T20:09:03Z

this is annoying to whitelist browser choice instead of letting the users decide the access of our own passwords if security is really the concern.

bitwarden it is then. sigh. we do not deserve good things i feel like sometimes. there is always something up to ruin the experience.

pedromarvarez · 2025-04-19T02:23:02Z

As of macOS 15.4, it appears that Apple introduced strict checking of signing-identifier and team-identifier in /System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper (which you can verify through hex editing). There are a list of specific whitelisted identifiers, which, unfortunately ungoogled-chromium is not part of.

As far as I can tell, the list of whitelisted browsers are:

signing-identifier team-identifier
com.google.Chrome EQHXZ8M8AV0U
com.google.Chrome.beta EQHXZ8M8AV0W
com.google.Chrome.canary EQHXZ8M8AV0T
com.microsoft.edgemac UBF8T346G90Y
com.microsoft.edgemac.Beta UBF8T346G90X
com.microsoft.edgemac.Dev UBF8T346G90
com.microsoft.edgemac.Canary UBF8T346G90R
org.mozilla.firefox 43AQ936H960b
org.mozilla.firefoxdeveloperedition 43AQ936H960R
org.mozilla.nightly 43AQ936H960Y
company.thebrowser.Browser S6N382Y83G0P
com.brave.Browser KL8N8XSYF40R
com.vivaldi.Vivaldi 4XF3XNRN6Y0V
com.operasoftware.Opera A2P9LX4JPN0X
com.operasoftware.OperaGX A2P9LX4JPN0

If I have Arc and i'm having the same problem, then why that is? It's happening since two months ago :( Is something on my end then?

Cubik65536 · 2025-04-19T02:33:06Z

As of macOS 15.4, it appears that Apple introduced strict checking of signing-identifier and team-identifier in /System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper (which you can verify through hex editing). There are a list of specific whitelisted identifiers, which, unfortunately ungoogled-chromium is not part of.
As far as I can tell, the list of whitelisted browsers are:
signing-identifier team-identifier
com.google.Chrome EQHXZ8M8AV0U
com.google.Chrome.beta EQHXZ8M8AV0W
com.google.Chrome.canary EQHXZ8M8AV0T
com.microsoft.edgemac UBF8T346G90Y
com.microsoft.edgemac.Beta UBF8T346G90X
com.microsoft.edgemac.Dev UBF8T346G90
com.microsoft.edgemac.Canary UBF8T346G90R
org.mozilla.firefox 43AQ936H960b
org.mozilla.firefoxdeveloperedition 43AQ936H960R
org.mozilla.nightly 43AQ936H960Y
company.thebrowser.Browser S6N382Y83G0P
com.brave.Browser KL8N8XSYF40R
com.vivaldi.Vivaldi 4XF3XNRN6Y0V
com.operasoftware.Opera A2P9LX4JPN0X
com.operasoftware.OperaGX A2P9LX4JPN0

If I have Arc and i'm having the same problem, then why that is? It's happening since two months ago :( Is something on my end then?

Well, company.thebrowser.Browser is Arc, so I can't tell if it is your issue or the list is not accurate...

magn2o · 2025-04-19T02:47:23Z

As of macOS 15.4, it appears that Apple introduced strict checking of signing-identifier and team-identifier in /System/Cryptexes/App/System/Library/CoreServices/PasswordManagerBrowserExtensionHelper.app/Contents/MacOS/PasswordManagerBrowserExtensionHelper (which you can verify through hex editing). There are a list of specific whitelisted identifiers, which, unfortunately ungoogled-chromium is not part of.
As far as I can tell, the list of whitelisted browsers are:
signing-identifier team-identifier
com.google.Chrome EQHXZ8M8AV0U
com.google.Chrome.beta EQHXZ8M8AV0W
com.google.Chrome.canary EQHXZ8M8AV0T
com.microsoft.edgemac UBF8T346G90Y
com.microsoft.edgemac.Beta UBF8T346G90X
com.microsoft.edgemac.Dev UBF8T346G90
com.microsoft.edgemac.Canary UBF8T346G90R
org.mozilla.firefox 43AQ936H960b
org.mozilla.firefoxdeveloperedition 43AQ936H960R
org.mozilla.nightly 43AQ936H960Y
company.thebrowser.Browser S6N382Y83G0P
com.brave.Browser KL8N8XSYF40R
com.vivaldi.Vivaldi 4XF3XNRN6Y0V
com.operasoftware.Opera A2P9LX4JPN0X
com.operasoftware.OperaGX A2P9LX4JPN0

If I have Arc and i'm having the same problem, then why that is? It's happening since two months ago :( Is something on my end then?

Confirm the bundle and team identifier of your installed app with codesign -dv [path to app]

Also, this particular issue would’ve appeared with macOS 15.4, so unless you were running betas, it should’ve only appeared a couple weeks ago.

pedromarvarez · 2025-04-19T23:28:45Z

Thank you for replying! @magn2o @Cubik65536 I already checked the bundle and team identifier and this is what i got from terminal:

Identifier=company.thebrowser.Browser
TeamIdentifier=S6N382Y83G

Executable=/Applications/Arc.app/Contents/MacOS/Arc
Identifier=company.thebrowser.Browser
Format=app bundle with Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=597158 flags=0x10000(runtime) hashes=18650+7 location=embedded
VersionPlatform=1
VersionMin=851968
VersionSDK=983040
Hash type=sha256 size=32
CandidateCDHash sha256=0a84fcc6b89a95de3b2eda8beefcec3aafbc301b
CandidateCDHashFull sha256=0a84fcc6b89a95de3b2eda8beefcec3aafbc301b12a7e0fbde2b23f93a677ebe
Hash choices=sha256
CMSDigest=0a84fcc6b89a95de3b2eda8beefcec3aafbc301b12a7e0fbde2b23f93a677ebe
CMSDigestType=2
Executable Segment base=0
Executable Segment limit=65994752
Executable Segment flags=0x1
Page size=4096
CDHash=0a84fcc6b89a95de3b2eda8beefcec3aafbc301b
Signature size=9023
Authority=Developer ID Application: The Browser Company of New York Inc. (S6N382Y83G)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Apr 16, 2025 at 10:37:12
Info.plist entries=56
TeamIdentifier=S6N382Y83G
Runtime Version=15.0.0
Sealed Resources version=2 rules=13 files=836
Internal requirements count=1 size=220
pedromarvarez@Pedros-Mac-mini ~ %

As well i have Sonoma 14.7.4 but i updated to Sequoia two months ago, i had to downgrade right away due a compatibility problem with my canon camera and since then i have this problem even though i'm in Sonoma 14.7.4.

I checked the passwords options and the Autofill and iCloud keychain is on, as well I toggled off and on just in case.

But i'm still having the same message when I try to use the extension in my Arc:

magn2o · 2025-04-20T00:28:41Z

As well i have Sonoma 14.7.4 but i updated to Sequoia two months ago, i had to downgrade right away due a compatibility problem with my canon camera and since then i have this problem even though i'm in Sonoma 14.7.4.

Wait, you're on 14.7? That being the case, this particular restriction does not apply to you. My guess is this will address your issue (you'll need to adapt it to the proper Arc application path).

PF4Public mentioned this issue Jan 27, 2024

iCloud Passwords extension error - cannot retrieve OS version ungoogled-software/ungoogled-chromium#2621

Closed

3 tasks

PF4Public closed this as completed Feb 27, 2024

Cubik65536 mentioned this issue Mar 3, 2024

iCloud Password extension requires macOS Sonoma, despite already installed Alex313031/Thorium-MacOS#26

Open

auniverseaway mentioned this issue Jan 12, 2025

iCloud Password Extesion ungoogled-software/ungoogled-chromium#2685

Closed

3 tasks

justinkahrs mentioned this issue Mar 31, 2025

iCloud Passwords extension broken zen-browser/desktop#7040

Open

5 tasks

Cubik65536 reopened this Apr 5, 2025

Cubik65536 mentioned this issue Apr 5, 2025

iCloud Password Extension Bug on Mac 15.4 - This extension requires Sonoma or above / Verification Code does not appear zen-browser/desktop#7210

Open

5 tasks

Cubik65536 mentioned this issue Apr 8, 2025

Extension not working on newest MacOS update Sequoia 15.4 - "This extension requires macOS Sonoma or later to be installed." au2001/icloud-passwords-firefox#57

Open

notmgn mentioned this issue Apr 15, 2025

apw auth does not work on Mac OS 15.4 bendews/apw#10

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

iCloud Password Extension #144

iCloud Password Extension #144

dbrewood commented Jan 26, 2024

dbrewood commented Jan 27, 2024

claudiodekker commented Jan 27, 2024 •

edited

Loading

dbrewood commented Jan 27, 2024

Cubik65536 commented Jan 27, 2024 •

edited

Loading

PF4Public commented Feb 27, 2024

dbrewood commented Feb 27, 2024

PF4Public commented Feb 27, 2024

dbrewood commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024

dbrewood commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024 •

edited

Loading

dbrewood commented Feb 27, 2024

xcrap commented Oct 26, 2024

decal commented Nov 6, 2024

chefnaphtha commented Apr 4, 2025 •

edited

Loading

magn2o commented Apr 5, 2025

Cubik65536 commented Apr 5, 2025

chefnaphtha commented Apr 5, 2025

Cubik65536 commented Apr 5, 2025

CaptainWynn commented Apr 5, 2025

pedromarvarez commented Apr 19, 2025

Cubik65536 commented Apr 19, 2025

magn2o commented Apr 19, 2025 •

edited

Loading

pedromarvarez commented Apr 19, 2025

magn2o commented Apr 20, 2025 •

edited

Loading

iCloud Password Extension #144

iCloud Password Extension #144

Comments

dbrewood commented Jan 26, 2024

dbrewood commented Jan 27, 2024

claudiodekker commented Jan 27, 2024 • edited Loading

dbrewood commented Jan 27, 2024

Cubik65536 commented Jan 27, 2024 • edited Loading

PF4Public commented Feb 27, 2024

dbrewood commented Feb 27, 2024

PF4Public commented Feb 27, 2024

dbrewood commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024

dbrewood commented Feb 27, 2024

Cubik65536 commented Feb 27, 2024 • edited Loading

dbrewood commented Feb 27, 2024

xcrap commented Oct 26, 2024

decal commented Nov 6, 2024

chefnaphtha commented Apr 4, 2025 • edited Loading

magn2o commented Apr 5, 2025

Cubik65536 commented Apr 5, 2025

chefnaphtha commented Apr 5, 2025

Cubik65536 commented Apr 5, 2025

CaptainWynn commented Apr 5, 2025

pedromarvarez commented Apr 19, 2025

Cubik65536 commented Apr 19, 2025

magn2o commented Apr 19, 2025 • edited Loading

pedromarvarez commented Apr 19, 2025

magn2o commented Apr 20, 2025 • edited Loading

claudiodekker commented Jan 27, 2024 •

edited

Loading

Cubik65536 commented Jan 27, 2024 •

edited

Loading

Cubik65536 commented Feb 27, 2024 •

edited

Loading

chefnaphtha commented Apr 4, 2025 •

edited

Loading

magn2o commented Apr 19, 2025 •

edited

Loading

magn2o commented Apr 20, 2025 •

edited

Loading