You type your password to log in, everything looks normal, and then a box pops up asking for your keychain password — again. Sometimes it appears right after startup, sometimes every time an app tries to grab a saved Wi-Fi password or website login. It is annoying, but it is almost never a virus and it does not mean your Mac is broken.
In nearly every case, one thing has happened: your login keychain is out of sync with your current account password. Below is why that happens and the three ways to stop the prompts — from the gentle fix to the nuclear option.
Why your Mac keeps asking
Your login keychain is an encrypted file that stores your Wi-Fi passwords, website logins, app credentials, and certificates. Normally it is locked and unlocked automatically by your account password — you never see it. macOS keeps the two passwords matched for you.
The link breaks in a few specific situations:
- An admin (or you, at the login window) reset the account password instead of changing it from inside your own session. A reset does not re-key the keychain, so the old keychain password no longer matches — and macOS asks for it.
- You migrated or restored from a backup and the keychain carried over its old password while the account got a new one.
- iCloud Keychain got confused after a password change on another device, or you turned it off and on.
- The keychain file is damaged — usually after an unclean shutdown or a failed macOS update.
If you recently changed your password the normal way — System Settings while logged in — macOS re-keys the keychain automatically and you should not see prompts. If you are seeing them, one of the cases above is why. Our full walkthrough of how to change the login password on a Mac explains exactly which method keeps the keychain in sync.
Fix 1: Update the keychain password (the gentle fix)
Try this first — it keeps all your saved passwords intact.
- Open Keychain Access (press Command-Space, type Keychain Access, press Return). On the newest macOS it lives in Applications › Utilities.
- In the sidebar, right-click the login keychain and choose Change Password for Keychain “login”.
- Enter your old keychain password (often your previous account password). If you know it, set the new one to match your current login password. Done — the prompts stop and nothing is lost.
If you do not remember the old keychain password, this fix will not work — move to Fix 2.
Fix 2: Reset the default keychain (when you forgot the old one)
This creates a fresh, empty login keychain matched to your current password. You lose the saved passwords in the old keychain (Wi-Fi, some app logins), but macOS and Safari will re-save them as you use them — and if you use iCloud Keychain, most website logins come right back.
- Open Keychain Access.
- From the menu bar choose Keychain Access › Settings (older macOS: Preferences).
- Click Reset My Default Keychains, enter your current login password, and confirm.
- Log out and back in. A brand-new login keychain is created and unlocked by your current password, so the prompts stop.
If your macOS version hides that button, you can instead quit Keychain Access, delete the files in ~/Library/Keychains/ named login.keychain-db, then restart — macOS rebuilds a fresh one at next login.
Fix 3: Make sure iCloud Keychain is doing its job
If your prompts are about website and app passwords specifically, turn iCloud Keychain on so your logins live in the cloud and survive a keychain reset:
- Open System Settings, click your name at the top, then iCloud.
- Open Passwords & Keychain and turn it On for this Mac.
Want the full picture of how Apple stores and syncs your logins? Read Apple Passwords & iCloud Keychain, explained.
Still getting prompts?
If none of the above sticks, the keychain file is likely corrupted or a deeper account issue is in play. Booting into Safe Mode (or, on Apple silicon, holding the power button to reach startup options) and creating a new keychain there usually clears it. Persistent, unexplained password prompts on a Mac that is also slow or crashing can point to failing storage — worth checking before you trust the machine with anything important.
Thinking about a clean start instead?
Sometimes the fastest cure for a Mac tangled up in old accounts, mismatched keychains, and years of leftover settings is a fresh machine that just works. A certified refurbished MacBook comes wiped and ready — no inherited password mess. A refurbished M1 MacBook Air starts at $569.99, and you can browse our current Apple clearance deals for the best prices. Every Mac ships free with our own one-year warranty.
Frequently asked questions
Why does my Mac ask for the keychain password after every restart?
Because the login keychain password no longer matches your account password, so macOS cannot unlock it automatically at login and asks you to do it manually. Matching the two passwords (Fix 1) or resetting the keychain (Fix 2) stops it.
Will resetting my keychain delete my files or apps?
No. Resetting the keychain only affects saved passwords and certificates in that keychain — your documents, photos, and apps are untouched. You may need to re-enter some Wi-Fi and app passwords afterward.
Is the keychain password the same as my login password?
They are meant to be identical, and macOS keeps them matched when you change your password normally. They drift apart only when the account password is reset (not changed) or restored from a backup — which is exactly what causes the repeated prompts.
Could this be malware?
Almost never. A repeating keychain prompt is a sync problem, not a security breach. If your Mac is also unusually slow, overheating, or crashing, that is a separate hardware question worth investigating.