Particle.news

Apple’s iOS 27 Lets Passwords App Automatically Change Weak or Compromised Logins

Apple says the feature protects user data by running models on device with a Private Cloud Compute layer that it claims prevents personal data from being stored or accessed by Apple.

Overview

  • Apple announced the new agentic password-change feature at WWDC on Monday, and it is available in the iOS 27 developer beta with a public beta next month and a full release planned for September.
  • The tool uses Apple Intelligence together with Safari to sign in to eligible accounts, navigate site flows, and generate and submit stronger passwords without the user manually visiting each site.
  • Newly generated credentials are saved directly into the built-in Passwords app so users can retrieve logins and avoid memorizing complex passwords after an automated change.
  • Apple says most work will run on-device and that more complex requests will use Private Cloud Compute; the company also disclosed that its foundation models were fine‑tuned using outputs from Google’s Gemini.
  • Security researchers and coverage note the beta period will let experts test edge cases because agentic automation can introduce new attack vectors such as prompt injection or automation abuse, and the feature replaces Passwords’ prior role of only flagging weak or leaked credentials.