Passwords · 1zero

Save logins as you sign in, fill them back in, and manage them in Settings → Passwords.

The Browser has its own password manager. It offers to save a login after you sign in, lists your saved logins when you click into a sign-in form, and suggests strong passwords when you sign up.

Your logins are kept in one file on your computer, sealed with your computer's keychain, so only you, signed in to your computer, can open it. Nothing is sent anywhere.

After you sign in somewhere new, or with a new password, the Dynamic Island opens for a few seconds with the site, your user name, and the password as dots. Then it folds back to the pill, which still offers Save for a little while.

Choice	Does
Save (or Update, for a new password)	Keeps the login.
Never	Stops offering on this site.
Edit…	Opens a dialog where you can change the user name or password before saving.
×	Not now. Letting it go without an answer counts the same.

It only asks after a sign-in that worked. A wrong password that brings the form back doesn't get a prompt. Sites that ask for your user name and password on separate steps are handled too.

With the island turned off, or with a page in full screen, the question comes up as a dialog over the window instead.

Click into a sign-in form's user name or password field and a menu lists the logins saved for that site. Pick one to fill both fields. Manage passwords… at the bottom opens Settings.

The menu also offers logins saved on other parts of the same site (say, accounts.example.com for example.com), and names the address so you know which one you're picking.

Fill in as pages load (off by default) fills the form without asking when a secure site has exactly one saved login.

Strong passwords

In a sign-up or change-password form, the password field offers a strong password made up for you. Use it and it's saved straight away, and the island says so.

Some sites ask for a user name and password in a box from the browser rather than on the page. Those boxes fill in from, and save to, your passwords too.

Settings → Passwords

The top section holds the switches:

Setting	Default	Does
Offer to save passwords	On	Asks whether to keep a login after you sign in somewhere new, or with a new password.
Suggest saved logins	On	Lists the site's saved logins under sign-in fields.
Fill in as pages load	Off	Fills a secure site's only saved login without asking.
Suggest strong passwords	On	Offers a made-up password in sign-up and change-password forms.
Sites that ask in a box	On	Fills and saves sign-in boxes from the site itself.
Touch ID to show or copy	On	Mac only. Asks for Touch ID before a password shows or is copied in Settings, then not again for a minute.

Saved passwords

The list shows every saved login with its site and user name. Logins are marked Weak or Reused when the password is easy to guess or used on more than one site, and http when the login is for a site without HTTPS.

From a row you can show, copy, edit, or delete a login. A copied password is cleared from the clipboard after a minute if it's still there. Add saves one by hand.

Keys	Does
`↑` `↓`	Move through the list
`Home` `End`	First or last login
`Enter`	Edit the picked login
`Delete`	Delete it, after asking
`⌘CtrlC`	Copy its password
`⌘Ctrl⇧ShiftC`	Copy its user name
`⌘CtrlF`	Search

Never saved

Sites where you picked Never are listed here. Remove one to be asked again.

Importing and exporting

Import… reads a CSV file exported from another browser or password manager: Chrome, Edge, Firefox, Safari, Bitwarden, 1Password, LastPass, and others. It says how many logins were added, updated, already saved, or skipped.

Export… saves your logins as a CSV in Chrome's format. It asks first, and for Touch ID on a Mac.

An exported file isn't encrypted. Anyone who opens it can read every password in it, so delete it once you're done.

To bring passwords straight over from Chrome, Arc, Firefox, and other browsers on the same computer, use Settings → Import instead. See Importing.

The AI chat can sign in for you with a saved login without ever seeing it: the browser fills the form itself, after you allow it in the chat. This is off until you turn it on under Settings → Passwords → AI assistant.

Setting	Default	Does
Let the AI sign in with saved logins	Off	When a page the AI is working on asks you to sign in, it can ask to use your login.
Ask before signing in	Once per site	Every time asks for every sign-in, even on a site you allowed before.
Touch ID too	Off	After you allow it, Touch ID confirms it's you before anything is filled in.
Press sign in	On	The AI's sign-in also presses the form's button.
Share user names	Off	Off, the AI sees only "account 1", "account 2". On, it sees which accounts you have on a site, never their passwords.
Subagents too	Off	Helpers working in their own tabs can ask to sign in as well, with the same approval.

The AI also needs Act on pages turned on in Settings → AI. You can keep a single login from the AI from its row's menu with Keep from the AI.

Incognito

Incognito windows fill from and save to the same logins as your other windows.

Limits

Logins inside a frame from another site, embedded in the page, aren't filled.
Logins don't sync between computers or between profiles.
There's no check against known data breaches.
Passkeys work differently. See Passkeys and security keys.