Apple launches the Password Manager Resources project on Github, to make it easier for developers of password manager apps to create strong passwords
Chance Miller / 9to5Mac :
Context & Ripple Effects
This GitHub release lands a few months after iOS 14 code revealed Apple was quietly beefing up its own Keychain password manager with two-factor support — so by mid-2020 Apple is investing on both sides of the category: its built-in manager and the tooling for third-party ones. Publishing Password Manager Resources hands outside developers Apple's rules for strong-password generation and per-site requirements.
It reads differently in hindsight: four years later Apple shipped a dedicated Passwords app across platforms including Windows, while Google countered with cross-platform passkey syncing via Password Manager PIN. The 2020 project is the early, cooperative layer of what became direct competition between platform vendors over where logins live.
First-order effects
- Third-party password manager developers gain Apple's website-specific password rules and strong-generation heuristics for free, cutting the engineering cost of producing compatible, strong credentials.
- Users of those third-party apps immediately get fewer sites rejecting auto-generated passwords, since the shared resources encode each site's quirks rather than leaving developers to guess.
Second-order effects
- By standardizing the plumbing, Apple positions itself as the reference implementation other managers conform to — softening rivalry just long enough for iCloud Keychain to mature into the full Passwords app that later imports passwords from those same rival services.
- Google's response path is visible in the coverage: rather than adopting Apple's resources, it built its own cross-platform sync layer, splitting the ecosystem along vendor lines instead of converging on one spec.
Third-order effects
- If the pattern holds, password management structurally migrates from paid standalone products toward platform vendors who give away the basics and monetize the lock-in — a squeeze the category's independents have faced since at least 1Password's feature races in the mid-2010s.
- Apple's later agentic-AI feature that automatically rotates weak or compromised passwords presupposes exactly the standardized credential infrastructure this 2020 project seeded — the groundwork phase precedes the automation phase.
The trend: Credential management is consolidating around OS vendors that publish open tooling first and ship competing native managers later, turning password apps from products into platform features.