
I know that safari stores cookies(what keeps you logged in), and passwords in keychain but other apps are able to utilize keychain for storing sensitive data so like Xcode stores the developer login token in keychain and Adobe creative cloud keeps the users login token stored in keychain. On a Mac with the security tokens you could for example get the Xcode account security token for a developer, write a malicious app, publish it under the name of someone else as either a new app or as an update. What this means in practice is while a hacker with iOS’s keychain will have the passwords for the accounts they would still need to go through 2 factor and login attempt emails would be sent. You may still be asked for a user admin password when doing some functions that will affect the system.I believe this is intentional, apple views Touch ID as not a strong enough security measure for keychain, taking control of a macs keychain can be worse than taking control of an iPhones keychain, on Mac you have the security tokens in keychain as well as your passwords, on iOS you only have your passwords. Here are the steps to set your keychain to match your user password. If you set your user password and your keychain password to match you will not be asked for the Keychain password on login. You can only disable your user login, but it won't save you much as it will still ask for your Keychain password when you login so that it knows how to access other things. This is helpful if you connect to a WIFI network on one device your other Apple devices will also use then. Your Keychain can also be setup to be saved to iCloud so that passwords will be available on all devices. so that the can be access between devices. iCloud can also be where you store your contacts, calendars, documents etc.

Your iCloud ID is what you use when purchasing apps both on your iOS device or Mac. iCloud: This is Apple's Cloud service.Keychain: The keychain is an app that is part of OS X that stores all the secure information such as certificates, passwords for other apps like safari when you save a login, WIFI passwords etc.

So what's the difference between login/keychain/iCloud passwords? And how do i disable them?
