Passwords App Gets One-Tap Fix for Weak Logins in iOS 26

Apple’s Passwords app in iOS 26 is getting automated password remediation: one tap, and it fixes weak or compromised credentials across your accounts without you visiting a single website manually.

The feature builds on what the app already does. It scans saved logins and flags anything too simple or caught in a known data breach. The gap until now was that acting on those warnings meant opening Safari yourself, finding the login page, authenticating, navigating to security settings, and repeating that for every flagged account. Most people never bother, which is precisely why credential stuffing attacks keep working.

The new Fix Passwords button changes that loop entirely. Tap it and the system opens Safari in the background, signs into each affected account, generates a stronger passkey or password, saves it, and closes out. The whole process plays out on screen with live status updates, and a cancel button stays visible throughout if you want to stop mid-run.

What Apple is actually describing here is a browser automation agent operating inside a security context, which is a more interesting technical claim than the marketing framing suggests. The system has to handle login flows that vary wildly across sites, including multi-step verification, CAPTCHA prompts, and non-standard password change pages. Apple has not detailed how it handles edge cases, and the developer beta is the earliest place to find out.

Availability and timing

The feature ships with iOS 26, expected as a public release in September. A developer beta is available now for those who want early access.

The timing reflects a broader pattern. Apple spent years building password infrastructure quietly, from iCloud Keychain to passkey support, and is now layering automation on top of that foundation. The Passwords app went from a buried Settings menu to a standalone app last year, and it is clearly not done evolving.