At WWDC 2026, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords.
Right now, Safari and the built-in Apple Passwords app can automatically flag weak, duplicate, or compromised passwords.
For example, if you enter a password when you’re creating an account, Apple will warn you if it detects the password is weak, and Safari will help you create a secure password.
However, Apple’s built-in password manager or Safari does not try to automatically fix your weak or compromised passwords. This changes with a new AI-powered security feature.
Apple says the built-in password app and Safari now use AI to “agentically” take action based on your behavior and secure your passwords automatically.
Source: Apple
This feature will launch with iOS 27 for the Passwords app and Safari, which can automatically update eligible accounts to strong passwords.
Apple promises security and privacy with Apple Intelligence
Apple argues that you don’t have to worry about safety or privacy, as these features are powered by the next generation of Apple Foundation Models.
Source: Apple
The foundation models are custom-built in collaboration with Google. Apple used Gemini models, likely its output, to fine-tune its own model and deeply integrated them into Apple Intelligence experiences.
“These latest models run on device and on servers using Private Cloud Compute,” Apple wrote in a blog post.
“Every facet of the new Apple Intelligence architecture is built privacy-first, from the latest Apple Foundation Models to the core operating system technologies that integrate these models deep into Apple’s platforms.”
Most of these features run locally on new iPhones, but Apple also uses Private Cloud Compute to run some features in the cloud without sharing your personal data.
“When Private Cloud Compute is handling users’ requests, their personal data is not stored nor made accessible to Apple or anyone else,” Apple noted.
Apple says Apple Intelligence improvements and an Agentic password manager are set to arrive with iOS 27 later this year.
However, if you can’t wait, you can sign up for the Developer Program and try the beta build today.
Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.
