Ask Different (Apple)
Q&A for power users of Apple hardware and software
Latest Questions
1
votes
0
answers
107
views
Websites no longer doing authentications for browsers running on El Capitan iMac
In the last 24 hours Reddit no longer offers correct authentication while browsing from an iMac running El Capitan. Other sites like StackExchange still work. ResearchGate.net [suffered issues previously][1]. 1. ResearchGate.net ( first to drop out... but chromium still works! as of Apr29th,2025) 2....
In the last 24 hours Reddit no longer offers correct authentication while browsing from an iMac running El Capitan.
Other sites like StackExchange still work.
ResearchGate.net suffered issues previously .
1. ResearchGate.net ( first to drop out... but chromium still works! as of Apr29th,2025)
2. Github.com
3. Annas-archive.org
4. Reddit.com ( as of April 2025)
I’d like to learn more to understand if these failures are common or just every site gets to do what it wants.
My educated guess is that this is a general web server authentication issue, if I can figure why this doesn’t work we may be able to implement a fix client-side.
How can I understand these failures?
allthingsgo
(11 rep)
Apr 18, 2025, 01:03 PM
• Last activity: Apr 29, 2025, 01:23 PM
3
votes
3
answers
1052
views
How does Apple FaceID authentication work?
I gave my son my passwords to Fidelity Investments and my Spectrum Internet account. On his phone, he logged into both apps with my passwords and only needed his face (using FaceID) to access those two accounts. However, one day I wanted to take away his access and changed passwords to both of those...
I gave my son my passwords to Fidelity Investments and my Spectrum Internet account. On his phone, he logged into both apps with my passwords and only needed his face (using FaceID) to access those two accounts. However, one day I wanted to take away his access and changed passwords to both of those accounts, yet he continues to have access to my accounts on his phone using just FaceID.
I thought FaceID ==> gives the phone owner access to the passwords saved on the phone. Now it looks that the phone owner's face gives direct access to once authenticated apps on the phone. Is that how FaceID works? And there's no way for me to revoke his access to my accounts?
jeffrey
(461 rep)
Sep 4, 2021, 09:10 PM
• Last activity: Apr 14, 2025, 04:23 PM
3
votes
2
answers
36208
views
"Email already in use" Apple ID error message. How can I set it up?
A little over month ago I received an email from the Russian Apple website, asking me to confirm my email to complete the registration of my Apple ID. I am thinking someone possibly used my email by mistake. I did not click the authentication link. The message stated that if it wasn't me who registe...
A little over month ago I received an email from the Russian Apple website, asking me to confirm my email to complete the registration of my Apple ID. I am thinking someone possibly used my email by mistake. I did not click the authentication link. The message stated that if it wasn't me who registered, I shouldn't worry.
However, now I am trying to create an Apple ID but I get the error message:
> "Email already in use"
I have never registered for an Apple ID with my email address. Resetting the password through email authentication does not send me any email.
What can I do?
daniel
(31 rep)
May 31, 2013, 11:00 AM
• Last activity: Apr 11, 2025, 02:10 AM
0
votes
1
answers
316
views
How to disable SSH password login in Sequoia
How do I disable SSH password login in Sequoia? In previous MacOS versions you would edit /etc/ssh/sshd_config However, in Sequoia every line in that file commented out except: Include /etc/ssh/sshd_config.d/* But the only file in that directory is: 100-macos.conf Which contains nothing of interest....
How do I disable SSH password login in Sequoia?
In previous MacOS versions you would edit /etc/ssh/sshd_config
However, in Sequoia every line in that file commented out except:
Include /etc/ssh/sshd_config.d/*
But the only file in that directory is: 100-macos.conf
Which contains nothing of interest.
So, where do I set **PasswordAuthentication no**, etc.?
Buadhai
(681 rep)
Dec 10, 2024, 12:20 AM
• Last activity: Feb 17, 2025, 04:43 PM
0
votes
1
answers
172
views
Running shell script with Touch ID authentication
Leveraging AppleScript, we can run a shell command that requires `sudo` by asking for elevated permissions, which in turn shows a prompt to the user. For example: do shell script "/usr/bin/say example" with administrator privileges Prior to Sonoma, this used to show a Touch ID prompt (on supported M...
Leveraging AppleScript, we can run a shell command that requires
sudo by asking for elevated permissions, which in turn shows a prompt to the user. For example:
do shell script "/usr/bin/say example" with administrator privileges
Prior to Sonoma, this used to show a Touch ID prompt (on supported Macs) or a password prompt (on Macs without Touch ID). But then it stopped working and it now always shows a password prompt.
Is there a way to get the behaviour back? The requirement is simple: I want to run a script with elevated permissions and show a Touch ID (or password prompt when on an unsupported Mac) to ask for the authentication. The full thing should still return the script's exit code as that is important for error detection.
I'm not married to AppleScript, I'm open to something in Swift which has to be compiled. But it does still need to run an external script.
user137369
(1666 rep)
Feb 1, 2025, 05:54 PM
• Last activity: Feb 1, 2025, 09:34 PM
6
votes
5
answers
1608
views
List apps with access to your Apple ID
Since you can now login to certain OSX/iOS apps using your Apple ID credentials rather than with an application-specific account, is there a way to list all of the apps you have granted access to and edit their permissions (something like what Google does when you authenticate using your Google cred...
Since you can now login to certain OSX/iOS apps using your Apple ID credentials rather than with an application-specific account, is there a way to list all of the apps you have granted access to and edit their permissions (something like what Google does when you authenticate using your Google credentials)?
user1301428
(327 rep)
Jul 26, 2016, 12:46 PM
• Last activity: Jan 5, 2025, 02:48 PM
27
votes
8
answers
23562
views
Run a program/script when the screen is locked or unlocked
Is there a way to run a specified script or program when the screen is locked or unlocked? Ideally a bash function or an AppleScript. Is there an event that I could subscribe to that would allow me to do that? Or an existing app that supports this?
Is there a way to run a specified script or program when the screen is locked or unlocked? Ideally a bash function or an AppleScript.
Is there an event that I could subscribe to that would allow me to do that? Or an existing app that supports this?
nwinkler
(8886 rep)
Dec 3, 2014, 12:50 PM
• Last activity: Aug 20, 2024, 06:34 AM
1
votes
1
answers
152
views
Face ID authentication
When I use Face ID to sign into a third party application what is being sent to the application server to confirm my login. Apple state, , ** Apps are only notified regarding whether the authentication is successful** I assumed that, on successful confirmation that my face is matched, my username an...
When I use Face ID to sign into a third party application what is being sent to the application server to confirm my login.
Apple state, , ** Apps are only notified regarding whether the authentication is successful**
I assumed that, on successful confirmation that my face is matched, my username and application password/token is forwarded, but the quote from apple would suggest this is not the case.
If nothing unique is being sent other than I would assume my user name and a generic confirmation that my face matches, what is stopping a third party from accessing my online banking account for example?
Richard
(11 rep)
Mar 14, 2024, 03:03 PM
• Last activity: Mar 14, 2024, 04:57 PM
13
votes
3
answers
29956
views
What's the equivalent of md5sum --check for a mac?
I have a lot of files that I need to check. In a UNIX environment I can simply type: ``` md5sum --check MD5.txt ``` and the checksum of each file is calculated and compared against the checksums in MD5.txt. How do I do this in a macOS environment. The closest I found was to run ``` md5 -r * > output...
I have a lot of files that I need to check. In a UNIX environment I can simply type:
md5sum --check MD5.txtmd5 -r * > output.txt
WantaghMomma
(133 rep)
Jan 11, 2023, 08:56 PM
• Last activity: Jan 11, 2024, 09:47 PM
1
votes
0
answers
533
views
Apple mail won't log in to gmail account from High Sierra. Cannot add Google account
Call the computer Elf. Elf runs High Sierra. This machine is locked at High Sierra because this is the latest version that will run Aperture, with something like 150,000 photos. Apple mail will no longer log into Gmail. Error cited is: [![Apple Mail error message][1]][1] Curriously, Elf's Apple Mail...
Call the computer Elf. Elf runs High Sierra. This machine is locked at High Sierra because this is the latest version that will run Aperture, with something like 150,000 photos.
Apple mail will no longer log into Gmail. Error cited is:
Curriously, Elf's Apple Mail can open a different gmail account.
On another machine also running High Sierra (I don't like apple mail) I deleted all Internet accounts in System Preferences, then tried to create a new google account.
A look at Console, and a search for "certificate" showed:
com.apple.preferences.internetaccounts.remoteservice
Failed to properly identify Apple's EV certificate. Cancelling.
I may be stuck by our unwillingness to upgrade from High Sierra. Which means that we used a different platform for reading email. Currently I use the web interface, which with it's support for labels I find useful. But my wife prefers the Apple mail interface.
However she can log in on a delegated account we use for business. I don't understand how that works internally.
Curriously, Elf's Apple Mail can open a different gmail account.
On another machine also running High Sierra (I don't like apple mail) I deleted all Internet accounts in System Preferences, then tried to create a new google account.
A look at Console, and a search for "certificate" showed:
com.apple.preferences.internetaccounts.remoteservice
Failed to properly identify Apple's EV certificate. Cancelling.
I may be stuck by our unwillingness to upgrade from High Sierra. Which means that we used a different platform for reading email. Currently I use the web interface, which with it's support for labels I find useful. But my wife prefers the Apple mail interface.
However she can log in on a delegated account we use for business. I don't understand how that works internally.
Sherwood Botsford
(1730 rep)
Jan 3, 2024, 05:42 PM
1
votes
0
answers
57
views
Double-factor auth to unlock iPhone in general and, especially, Passwords app in particular?
Is it possible to make iPhone require **both** FaceID **and** passcode when unlocking the device? Especially the built-in password manager is guilty of relying solely on FaceID to pull up a password for a website or an app. I thought I could at least force it to use the passcode instead of FaceID by...
Is it possible to make iPhone require **both** FaceID **and** passcode when unlocking the device?
Especially the built-in password manager is guilty of relying solely on FaceID to pull up a password for a website or an app. I thought I could at least force it to use the passcode instead of FaceID by disabling FaceID for passwords, but instead it stopped requiring any kind of verification at all when the phone is unlocked! This is very insecure as there is no additional line of defence for if you forgot your phone unlocked or if it was locked, but someone unlocks it with your face or even a picture of your face.
InfiniteLoop
(171 rep)
Nov 28, 2023, 10:29 PM
• Last activity: Nov 29, 2023, 10:03 AM
0
votes
1
answers
150
views
SecurtiyAgent process offload work to SecurityAgentHelper
Projects like Nomad-login (or nowadays Jamf-connect) use to modify the mechanism list in `system.login.console` authorizationRight. I see that non-privileged mechanisms runs by SecurityAgent process, but it can sometimes delegate another process called SecurityAgentHelper which is an xpc service. I...
Projects like Nomad-login (or nowadays Jamf-connect) use to modify the mechanism list in
system.login.console authorizationRight.
I see that non-privileged mechanisms runs by SecurityAgent process, but it can sometimes delegate another process called SecurityAgentHelper which is an xpc service.
I wonder if the role of process SecurityAgentHelper is to serve as fallback to SecurityAgent and under what conditions does it offload task for the helper process.
Can someone explain this design to me?
Zohar81
(641 rep)
Jan 31, 2021, 09:13 AM
• Last activity: Oct 20, 2023, 02:19 PM
0
votes
0
answers
94
views
How did my job's Smart Card become able to authenticate into my personal Macbook Pro?
**Quick History:** I purchased a 2023 Macbook Pro 16" a few months ago and promptly *followed some guide that enables Smart Card authentication for DOD sites in Firefox.* I wish I knew all the actions I did, but I think my ADHD got the best of me cuz I don't seem to have documented anything. **Issue...
**Quick History:** I purchased a 2023 Macbook Pro 16" a few months ago and promptly *followed some guide that enables Smart Card authentication for DOD sites in Firefox.* I wish I knew all the actions I did, but I think my ADHD got the best of me cuz I don't seem to have documented anything.
**Issue:** When my Smart Card is inserted into my CAC reader, and I use
sudo or try to unlock the screen, it prompts me for my Smart Card PIN instead of my local account's password or fingerprint.
**Questions:** I think I can fix it via a combination of sc_auth identities and sc_auth unpair -h*[hash]*, but before I do that:
1. Will the commands above affect my ability to authenticate into work-related web sites and VPNs with my Smart Card, or does it strictly only remove authenticating into my laptop with my Smart Card?
2. What could I have done that paired my Smart Card to my local account (so that I can avoid doing this later)?
beechfuzz
(1 rep)
Oct 19, 2023, 04:10 PM
• Last activity: Oct 19, 2023, 04:13 PM
9
votes
1
answers
373
views
Why does Keychain ask for the login password twice to show a password?
Whenever I want to view a password in my Keychain, it asks me the login keychain password twice: 1. First like this: [![enter image description here][1]][1] 2. Then like this: [![enter image description here][2]][2] I'm having trouble understanding why. I am running macOS High Sierra. [1]: https://i...
Whenever I want to view a password in my Keychain, it asks me the login keychain password twice:
1. First like this:
2. Then like this:
I'm having trouble understanding why. I am running macOS High Sierra.
2. Then like this:
I'm having trouble understanding why. I am running macOS High Sierra.
Scentle5S
(191 rep)
Jun 7, 2018, 05:20 AM
• Last activity: Jul 8, 2023, 09:00 AM
10
votes
1
answers
9137
views
How does one bypass the iCloud lock on a MacBook?
I bought a MacBook Air from someone, and they didn't properly factory reset it. I am currently trying to reset it, but when going to Recovery mode via the Internet to proceed further, it requires the person's Apple ID. So far I've tried to get in contact with the person, but they no longer respond....
I bought a MacBook Air from someone, and they didn't properly factory reset it. I am currently trying to reset it, but when going to Recovery mode via the Internet to proceed further, it requires the person's Apple ID.
So far I've tried to get in contact with the person, but they no longer respond. Is there any course of action other than selling it for parts as it’s still in perfect working order?
AlekNaomie BurtPilon
(103 rep)
May 7, 2023, 03:43 PM
• Last activity: Jun 8, 2023, 08:00 AM
-3
votes
1
answers
702
views
How to unlock an Apple ID through e-mail?
My AppleID was just registered and used on iCloud -- but not by myself. Perhaps a Christmas present erroneously associated with my e-mail, or maybe not. Could be malicious. Either way I want to secure the account which has been hijacked. As it's a web-app, I asked on webapps: https://webapps.stackex...
My AppleID was just registered and used on iCloud -- but not by myself. Perhaps a Christmas present erroneously associated with my e-mail, or maybe not. Could be malicious. Either way I want to secure the account which has been hijacked.
As it's a web-app, I asked on webapps:
https://webapps.stackexchange.com/q/123423/24327
then found I was able to gain control of a "fake" type, spam-trap, account:
https://webapps.stackexchange.com/q/123424/24327
So I also asked on the apple forum:
https://discussions.apple.com/thread/250043907
Not looking to spam the internet, but this is annoying and moderately concerning. So, asking apple experts here:
How do I gain access to the account associated with my e-mail not having knowledge of the associated phone number? Because I'm not able to proceed past that point.
Thufir
(241 rep)
Dec 26, 2018, 05:03 PM
• Last activity: Jun 7, 2023, 06:41 AM
0
votes
0
answers
49
views
Authentication is Disabled
On my Mac Mini, I am trying to update Alfred. So, I hit the update button and get prompted for an Admin username and password, which I provide correctly. However, I get an Authentication is Disabled message. Another answer stated to log in on the Admin account and run some commands. However, when I...
On my Mac Mini, I am trying to update Alfred. So, I hit the update button and get prompted for an Admin username and password, which I provide correctly. However, I get an Authentication is Disabled message.
Another answer stated to log in on the Admin account and run some commands. However, when I try to log in on the Admin Account, I get the "Authentication is Disabled" message and cannot log in.
So, how can this issue be fixed? I am currently unable to update my MacOS nor many of my apps to later versions due to this bug.
JustACoder
(1 rep)
May 19, 2023, 01:30 AM
0
votes
1
answers
1477
views
Where does Safari persist the credentials of HTTP(S) Basic Authentication?
- Some websites use [HTTP basic authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication). - How can you save the credentials of this kind of login in macOS Safari? - Where does Safari persist the credentials?
- Some websites use [HTTP basic authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication) .
- How can you save the credentials of this kind of login in macOS Safari?
- Where does Safari persist the credentials?
porg
(1118 rep)
May 16, 2023, 02:26 PM
• Last activity: May 16, 2023, 02:33 PM
2
votes
3
answers
1650
views
How can I log in to my working Google internet account with Apple Mail on my Mac?
I want Apple Mail to talk to a gmail account. In System Preferences, when I say I want a new Google account, I get a dialog that says > Google requires completing authentication in your web browser So I click the button and immediately I see another dialog > Failed to authenticate with Google, pleas...
I want Apple Mail to talk to a gmail account. In System Preferences, when I say I want a new Google account, I get a dialog that says
> Google requires completing authentication in your web browser
So I click the button and immediately I see another dialog
> Failed to authenticate with Google, please try again later
There is no evident communication with the browser, so I can't authenticate. I've also tried creating a normal manual mail account, but no better luck.
I have turned on Less Secure App Access for the account I want to use. I have no difficult logging into this account using the web (gmail.com), but I don't want to handle my mail that way; I need it to be part of my mail.
This has worked fine on other machines. This one is Catalina 10.15.7.
matt
(488 rep)
Aug 2, 2021, 02:54 PM
• Last activity: Apr 7, 2023, 07:56 PM
2
votes
0
answers
87
views
Mountain Duck with two factor authentication or VPN
I am connecting to a server in Sweden from the US. I have no problem connecting to the server in Terminal using two factor authentication, required by the server in Sweden. However, I've been struggling getting Mountain Duck to work as in addition to the password. The server in Sweden also requires...
I am connecting to a server in Sweden from the US. I have no problem connecting to the server in Terminal using two factor authentication, required by the server in Sweden.
However, I've been struggling getting Mountain Duck to work as in addition to the password. The server in Sweden also requires the two factor authentication where I get a code on my mobile app.
Is there a way to solve this issue?
Homap
(121 rep)
Feb 9, 2023, 07:03 PM
• Last activity: Feb 9, 2023, 07:14 PM
Showing page 1 of 20 total questions