# Login keychain vs System keychain

Canonical page: /glossary/login-vs-system-keychain

API keys & secrets glossary, macOS Keychain & security. Login Keychain vs System Keychain: What's the Difference?

**Short answer:** Your login keychain is unlocked automatically when you log into your Mac and holds personal items, such as Wi-Fi passwords and app credentials, tied to your user account specifically. The System keychain, by contrast, holds items available to every user on the Mac, such as some network certificates.

## Why it matters

Most apps, including personal API key tools, use the login keychain by default, since its contents are scoped to you and unlock alongside your own session rather than requiring separate administrator access.

## In Claude Keychain

Claude Keychain stores your API keys in your login keychain, matching how most personal credentials on a Mac are kept, rather than the shared System keychain.

## Common questions

**Which keychain should I use for a personal API key?**

The login keychain, since it is scoped to you and does not require administrator privileges to access.

**Can two user accounts on the same Mac share a keychain?**

Not directly through the login keychain; the System keychain is the mechanism for items meant to be shared.

## Related

[macOS Keychain](/glossary/macos-keychain), [Keychain Access](/glossary/keychain-access), [Keychain access group](/glossary/keychain-access-group)