ENUM

KeychainAccessibility

Contents

• Cases
  • afterFirstUnlockThisDeviceOnly
  • whenUnlockedThisDeviceOnly

public enum KeychainAccessibility: Sendable

The data-protection (accessibility) level applied to new-layout keychain items.

Both levels are this-device-only: stored secrets are device-bound and never migrate to a new device via an encrypted backup or iCloud, matching the Secure-Enclave keys they protect.

Cases

afterFirstUnlockThisDeviceOnly

case afterFirstUnlockThisDeviceOnly

Accessible after the device has been unlocked at least once since boot, including while the app is in the background. This is the default. Not accessible before the first unlock following a restart.

whenUnlockedThisDeviceOnly

case whenUnlockedThisDeviceOnly

Accessible only while the device is currently unlocked. Stricter than the default: any access while the device is locked (for example a background refresh) fails. Use when the integrator does not need background or locked access to the stored credentials.