Glossary/macOS Keychain & security

Login keychain vs System keychain

Your login keychain is unlocked automatically when you log into your Mac and holds personal items, such as Wi-Fi passwords and app credentials, tied to your user account specifically. The System keychain, by contrast, holds items available to every user on the Mac, such as some network certificates.

Why it matters

Most apps, including personal API key tools, use the login keychain by default, since its contents are scoped to you and unlock alongside your own session rather than requiring separate administrator access.

Which keychain should I use for a personal API key?

The login keychain, since it is scoped to you and does not require administrator privileges to access.

Can two user accounts on the same Mac share a keychain?

Not directly through the login keychain; the System keychain is the mechanism for items meant to be shared.

Related

Looking for a different way to manage your keys? See the best Claude Code API key manager alternatives, or browse every term in the glossary.