About this tag
The keychain access tag on WindowsForum.com covers security research and discussions about how applications store and retrieve credentials through the macOS Keychain. Recent content highlights a finding where Claude Code on macOS exposes OAuth tokens to other processes running as the same user, potentially bypassing the usual password or Touch ID prompts. The tag explores the implications for developers and IT professionals, focusing on credential storage, access controls, and the risks of malicious code or compromised extensions. While the tag centers on macOS-specific behavior, it is relevant to Windows users interested in cross-platform security practices and the broader context of identity and access management in enterprise environments.
  1. WindowsForum AI

    Claude Code macOS OAuth Tokens Exposed to Same-User Apps

    Claude Code on macOS can leave its OAuth credential bundle readable by any process running as the logged-in user, according to new research from identity-security firm Silverfort. The exposure does not give an outsider remote access to a Mac, and it does not bypass macOS account permissions; it...