# Secure Enclave

Canonical page: /glossary/secure-enclave

API keys & secrets glossary, macOS Keychain & security. The Secure Enclave: Apple's Hardware Security Chip

**Short answer:** The Secure Enclave is a dedicated, isolated coprocessor built into Apple silicon and recent Intel Macs with a T2 chip, used to handle the most sensitive cryptographic operations, such as Touch ID matching, independently of the main processor and operating system.

## Why it matters

Because it runs its own separate, minimal operating system, data the Secure Enclave protects generally cannot be extracted even if the main macOS system is compromised, which is a stronger guarantee than software-only encryption.

## In Claude Keychain

Claude Keychain does not talk to the Secure Enclave directly, it relies on the macOS Keychain, which is itself backed by the Secure Enclave's protections on supported Macs, to store your keys.

## Common questions

**Does every Mac have a Secure Enclave?**

Every Apple silicon Mac does, and most Intel Macs with a T2 chip, but older Intel Macs without one do not.

**Does the Secure Enclave protect my API keys specifically?**

Indirectly, yes, since the Keychain that stores them relies on protections the Secure Enclave provides.

## Related

[macOS Keychain](/glossary/macos-keychain), [Touch ID authentication](/glossary/touch-id), [Code signing](/glossary/code-signing)