Lock the login keychain when your Mac sleeps

Configure the login keychain to lock when your Mac sleeps if you want macOS to require the keychain password again before an app can retrieve protected items from that keychain.

The login keychain is normally unlocked when you log in or enter its password. Locking it on sleep reduces the time that its stored credentials remain available during an unattended session.

How to fix it

  1. Open Keychain Access. You can find it with Spotlight.
  2. Select login in the Keychains list.
  3. Choose Edit > Change Settings for Keychain “login”.
  4. Select Lock when sleeping.
  5. Optionally select Lock after and choose an inactivity period appropriate for your work. A shorter period offers more protection but can cause more password prompts.
  6. Click Save.
Keychain Access login keychain settings with Lock after and Lock when sleeping selected

Security and usability limits

  • This setting applies to the selected login keychain. It does not lock the Mac screen and does not replace a password requirement after sleep.
  • Apps that need an item from the locked keychain may ask for the keychain password after the Mac wakes.
  • Locking the keychain cannot revoke a password or secret that an authorized app already retrieved.

Also configure the Mac to require authentication promptly after sleep; see Start the screen saver and lock an inactive Mac.

Apple source

You might also be interested in

Check your security settings

SimpleumCheck Screenshot

SimpleumCheck checks the security settings on your Mac in three stages and gives you recommendations on how you can improve your security even further.

For Free

Protect and encrypt your data

SimpleumSafe Screenshot


Protect your data with SimpleumSafe App for Mac, iPhone and iPad. Don’t compromise when it comes to protecting your data.

Other security setting to check

PLEASE READ THE FOLLOWING TIP AND DISCLAIMER!

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck End User License Agreement (EULA).