Features

Password AutoFill

Last updated: 2026-10-25

Password AutoFill fills a saved website login into Safari or another app, without opening the vault first. It is optional, and stays off until you turn it on.

Turning it on

  1. Make sure Face ID or Touch ID is set up on the iPhone.
  2. Unlock the vault, open Settings in the app, choose Password AutoFill and turn it on. You confirm with your master password.
  3. In the iPhone's AutoFill & Passwords settings, allow Encrypt My Data to fill passwords.

Filling a login

Tap a user name or password field and choose Encrypt My Data. After Face ID or Touch ID, you see the saved logins for that website. Pick one and confirm the website it is going to before it is filled. If a site signs you in on a different address, you can deliberately choose to see all your saved logins.

What AutoFill can see

AutoFill never opens your vault. It reads a separate encrypted copy that holds only saved website logins: the website, user name and password, and enough about each item to name it. Notes, photos, videos, other items, unfinished drafts and your master password are never in it.

That copy has its own key in the iPhone's Secure Enclave. The key works only with Face ID or Touch ID, and only with the faces or fingerprints enrolled when you turned AutoFill on. If they change, the key stops working, and you open the app to set AutoFill up again. Every fill asks for Face ID or Touch ID.

Matching websites

A login is offered only where the saved website matches the requested one exactly, subdomain included. A login saved for example.com is not offered on login.example.com or on a look-alike address. This makes it harder for a fake site to get your password, but always check the website shown before you confirm.

Keeping it up to date

When you change or delete a saved login, the old copy is withdrawn first and a new one is written once the vault has saved the change. If that fails, AutoFill is unavailable until you refresh it in Settings or unlock the vault again. It never fills from out-of-date data.

What it does not do

  • It does not save new logins from Safari. Add them in the app.
  • It does not handle passkeys or one-time codes.

Turning it off

Turn off Password AutoFill in the app's Settings. That removes the separate copy and its key from the iPhone. Deleting the vault does the same.

Related: Password generator and check-up · Security · Support