Credentials stored in the cloud succumb to forensic software
ElcomSoft, the Russia-based maker of forensic software, has managed to find a way to access the data stored in Apple's iCloud Keychain, if Apple ID account credentials are available.
Apple's iCloud Keychain is a remote copy of the password vault that's optionally available to users of iOS and macOS devices.
If enabled, it can store copies of credentials for Safari websites, for services like Facebook, Twitter and LinkedIn, and for applications like Calendar, Contacts, and Mail, along with credit card numbers and Wi-Fi network data.
It also assists with two-factor authentication.
ElcomSoft's Phone Breaker 7.0 has gained the ability to access and decrypt iCloud Keychain data, under certain circumstances.