{"id":91,"date":"2016-11-11T21:25:48","date_gmt":"2016-11-12T04:25:48","guid":{"rendered":"http:\/\/www.macsrwe.com\/blog\/?p=91"},"modified":"2016-11-11T21:25:48","modified_gmt":"2016-11-12T04:25:48","slug":"the-one-ring","status":"publish","type":"post","link":"https:\/\/www.macsrwe.com\/blog\/the-one-ring\/","title":{"rendered":"The One Ring"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-99 alignright\" src=\"https:\/\/www.macsrwe.com\/blog\/wp-content\/uploads\/2016\/11\/one-ring-cartoon.png\" alt=\"&quot;I'd like to run some tests on that 'One Ring to rule them all' ring. Can I borrow it for a few days?&quot; &quot;I thought you had it?&quot;\" width=\"272\" height=\"585\" srcset=\"https:\/\/www.macsrwe.com\/blog\/wp-content\/uploads\/2016\/11\/one-ring-cartoon.png 607w, https:\/\/www.macsrwe.com\/blog\/wp-content\/uploads\/2016\/11\/one-ring-cartoon-140x300.png 140w, https:\/\/www.macsrwe.com\/blog\/wp-content\/uploads\/2016\/11\/one-ring-cartoon-476x1024.png 476w\" sizes=\"auto, (max-width: 272px) 100vw, 272px\" \/><\/p>\n<p>Know\u00a0that sinking feeling you get in the pit of your stomach when you realize that\u00a0something really important is nowhere to be found? That&#8217;s what we get\u00a0every time\u00a0we ask a client for\u00a0the password to his Macintosh, and the answer comes back, &#8220;I don&#8217;t remember.&#8221;<\/p>\n<p>No one knows better than we do how many passwords a modern computer user has to juggle\u00a0in the course of a day. Your email; your Facebook account; your banks; your photo collection; your credit cards; your pharmacy; hundreds\u00a0of websites; and perhaps even your home thermostat.<\/p>\n<p>The Mac OS does a reasonably good job of keeping track of (almost) every password associated with your life, by storing\u00a0them automatically\u00a0in a secure storage area called your <a href=\"https:\/\/support.apple.com\/kb\/PH20093?locale=en_US\">keychain<\/a>. That way, it can guard them against loss, present them automatically whenever needed, and keep your online life as manageable as possible.<\/p>\n<p>This keychain is secured by the one password that isn&#8217;t itself stored in the keychain: the password you use to login to\u00a0your Macintosh. That makes your Mac password, in effect, the one password that rules them all. Given that password, you can automatically or <a href=\"https:\/\/support.apple.com\/en-us\/HT201579\">manually\u00a0look up any other password you own in that keychain<\/a>. Without that password, your entire digital life is toast. Having this\u00a0one password can\u00a0mean\u00a0the difference between having to pay\u00a0for one or two hours of repair\u00a0time, or many hours of repair\u00a0time plus many hours of your own time.<\/p>\n<h2>&#8220;Can&#8217;t I just pick a new password?&#8221;<\/h2>\n<p>Sure you can. But if it were that straightforward, what would keep anyone who walked off with\u00a0your computer from &#8220;picking a new password&#8221; for it, and thereby gaining access to every bank account and credit card you possess?<\/p>\n<p>Yes, there&#8217;s a straightforward procedure to force a new password onto a Macintosh account. But when you next log into it, you&#8217;ll\u00a0be notified that your keychain is inaccessible, because it&#8217;s still encrypted with your original password&#8230; which, of course, you still don&#8217;t know. With the old password, it would be a simple matter to unlock the keychain to encrypt it with\u00a0the new password. Without it, every other password you need\u00a0(and don&#8217;t remember on your own) is locked up forever.<\/p>\n<h2>Regular visits to\u00a0the mental gymnasium<\/h2>\n<p>The one feature undoubtedly responsible for more cases of &#8220;I forgot my password&#8221; than any other is the <a href=\"https:\/\/support.apple.com\/en-us\/HT201476\">automatic login<\/a>. It&#8217;s seductive because it promises to make your daily online life easier, and does&#8230;\u00a0until your disk drive fails, or you fall victim to a ransomware or\u00a0<a href=\"https:\/\/www.macsrwe.com\/blog\/?p=72\">tech support scam<\/a>, and you need non-trivial reconstructive work done on your Mac. At that point, not knowing your password (because it&#8217;s been months or years since you actually had to type it anywhere) is an extra kick in the ribs that you really didn&#8217;t need while you were down. (We are seeing much the same syndrome now occurring\u00a0among users of\u00a0iPhones and iPads\u00a0due to\u00a0the availability of\u00a0&#8220;Touch ID.&#8221; A password you never type is a password you soon forget.)<\/p>\n<p>Our advice is <em>never to enable\u00a0automatic login<\/em>. Computers get stolen; the kids and grandkids get into things they shouldn&#8217;t when nobody is around; and most importantly, typing in your password every time you log into your Mac is the best and most effective way to ensure you never\u00a0forget it.<\/p>\n<p>(If you&#8217;re currently running with automatic login enabled, and realize\u00a0you have\u00a0indeed forgotten your login password, contact us for help before doing anything else, including disabling automatic login. We can ensure that the contents of\u00a0your keychain(s) are safe-stored for future accessibility before forcing your account to a new, known password.)<\/p>\n<h2>The Big Three passwords<\/h2>\n<p>Our advice to our clients is that they\u00a0keep special track of three main passwords. With these passwords, you can recover most any other password you own. Just like you wouldn&#8217;t go for a drive without pocketing\u00a0your license, you shouldn&#8217;t go online\u00a0without having\u00a0a record of these three passwords\u00a0in a secure place.<\/p>\n<ol>\n<li><strong>Your Mac login password<\/strong>, for all the reasons outlined above. This one will let you into your keychain, where most of the rest of your passwords are safe-stored.<\/li>\n<li><strong>Your Apple ID (App Store \/ iTunes Store \/ iCloud) password.<\/strong> This password is a major\u00a0special case, as it doesn&#8217;t exist in your keychain (unless you <a href=\"https:\/\/support.apple.com\/kb\/PH20119?locale=en_US&amp;viewlocale=en_US\">stored it there by hand as a note<\/a>, which you may want to consider now\u00a0that you know\u00a0it&#8217;s possible). This is the password you need to reclaim all your purchased apps, tunes, and movies, and to reestablish connections with your iDevices.<\/li>\n<li><strong>The password to your primary email address.<\/strong> If you forget or misplace either or both of the other two, this is the one you will need in order to receive responses to all the &#8220;reset my password&#8221; requests you will be making\u00a0to all your secure websites (banks, etc.) as well as resetting your Apple ID password.<\/li>\n<\/ol>\n<p>(If you&#8217;ve enabled <a href=\"https:\/\/support.apple.com\/en-us\/HT204085\">iCloud Keychain<\/a>, you\u00a0also chose a six-digit iCloud Security Code which you may consider recording somewhere, as it won&#8217;t be in your Mac keychain\u2014again, unless you put it there by hand. However, it&#8217;s not strictly necessary to have unless you&#8217;ve lost every other Apple device you own, as you can authorize any related activity from any\u00a0of your Apple devices.)<\/p>\n<h2>Exercise records discipline<\/h2>\n<p>When we advise\u00a0keeping copies of this information in a secure place, that also implies having a single\u00a0place for the information, identifying which password is for what, and destroying obsolete versions of the passwords. As repair\u00a0engineers, we are too often\u00a0confronted with &#8220;records&#8221; consisting of multiple notebooks, index cards, and\/or sticky notes containing several dozen total passwords, most of which have long since been superseded by others, with\u00a0none of them identified as to account or function. To top it off, sometimes the working password is not even among them, having been recorded on an entirely separate\u00a0piece of paper located elsewhere. A little organization and records discipline can mean the difference between a smooth service call and locking yourself out of your digital data indefinitely.<\/p>\n<p>We hope you&#8217;ll consider the tips presented here and choose to adopt\u00a0as many as possible in your own life, to keep your valuable data accessible to you while remaining secure from others.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Know\u00a0that sinking feeling you get in the pit of your stomach when you realize that\u00a0something really important is nowhere to be found? That&#8217;s what we get\u00a0every time\u00a0we ask a client for\u00a0the password to his Macintosh, and the answer comes back, &#8220;I don&#8217;t remember.&#8221; No one knows better than we do how many passwords a modern &hellip; <a href=\"https:\/\/www.macsrwe.com\/blog\/the-one-ring\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">The One Ring<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[18,15,19],"tags":[29,30,27,28],"class_list":["post-91","post","type-post","status-publish","format-standard","hentry","category-hints","category-macintosh","category-security","tag-identity","tag-keychain","tag-password","tag-security"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/posts\/91","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/comments?post=91"}],"version-history":[{"count":18,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/posts\/91\/revisions"}],"predecessor-version":[{"id":113,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/posts\/91\/revisions\/113"}],"wp:attachment":[{"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/media?parent=91"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/categories?post=91"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.macsrwe.com\/blog\/wp-json\/wp\/v2\/tags?post=91"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}