The plain-English version
A system facility for storing small sensitive items such as credentials using platform access controls.
Why it matters
It gives credential storage a different role from ordinary user preferences or document files.
Let’s make it click
An app stores a refresh credential through an appropriate Keychain access policy.
Vibe Bro’s heads-up
Putting a password in a preferences file and merely renaming the field does not provide credential-storage protections.
The docs behind it
Documentation links checked .
Editorial review · October 28, 2026
Supported: Apple Security documents short sensitive items, access groups, protection classes, and authentication policies. The small-token example and warning against plain preferences are supported.