The subject really asks it all.

According to this Mac Rumors article, Apple changed the password hashing algorithm between iOS 9 and iOS 10 from pbkdf2 with 10,000 iterations to SHA-256 with a single pass, for phone backups to computers via iTunes.

What were they thinking? Your password keychain is among the data stored in those backups. This seems like a pretty embarrassing foible for a company so focused on security, doesn't it? Presumably they are at least appending salt to the passwords before hashing.

  • 1
    They probably made a lucrative behind-the-scenes deal. </tinfoil> Commented Sep 25, 2016 at 22:12
  • 4
    <tinfoil>government pressure?</tinfoil> Commented Sep 25, 2016 at 22:18
  • 4
    It seems to me that your link answers your question sufficiently when it quotes Apple's statement that they'll be fixing it in a security update. But to paraphrase: they dun goofed. Commented Sep 26, 2016 at 0:20
  • I think it’s embarrassing for the moderators that they closed this as “primarily opinion based”. It is widely understood in the security community that a straight unsalted hash of a password does not constitute security. Commented Feb 3, 2019 at 16:30


Browse other questions tagged .