V1.4.0

Passwords (Keychain) viewer 🔐

Encrypted backups now include a new Passwords section that decrypts and displays what's saved in the iPhone's keychain:

• Wi-Fi passwords for known networks
• Website & app logins (account + password)
• Auth tokens and generic passwords

Each value has a one-click copy button. Deleted (tombstoned) entries and internal sync bookkeeping are filtered out so the list stays clean.

This only works on encrypted backups (the keychain is never included in unencrypted ones) and requires the backup password. Everything is decrypted locally on your Mac.

Under the hood

Per-item keys are unwrapped from the backup keybag (RFC 3394), then each item's payload is AES-256-GCM decrypted and parsed from its DER attribute set — verified end-to-end against a real iOS 16 encrypted backup.