How iOS 18 Passwords App Groups Accounts and Sites

Apple’s standalone Passwords app in iOS 18 simplifies credential management by categorizing saved items into predefined account types and consolidating entries associated with the same website domain. This article outlines the app’s categorization system, explaining how it separates different credential types—such as passkeys, two-factor verification codes, and Wi-Fi networks—and how it detects, merges, and presents multiple logins tied to matching or related web domains.

Grouping by Account Type

On the main dashboard, the Passwords app sorts saved credentials into distinct collections based on the credential type and usage status:

  • All: A unified list showing every saved login and credential across all services.
  • Passkeys: Dedicated filtering for modern, passwordless credentials authenticated via Face ID, Touch ID, or device PIN.
  • Codes: Gathers all time-based one-time passwords (TOTP) used for two-factor authentication, allowing quick access to verification codes without opening individual account pages.
  • Wi-Fi: A separate repository for saved Wi-Fi networks and their respective passwords, allowing users to view, copy, or share local network details.
  • Security: Groups accounts flagged for compromised, weak, reused, or unencrypted passwords.
  • Deleted: Temporarily stores removed items for up to 30 days before permanent erasure.
  • Shared Groups: Allows users to create collaborative folders to share select passwords and passkeys with trusted contacts or family members.

Grouping by Website Domain

When organizing website logins, the Passwords app relies on domain hierarchy and URL associations:

  • Multiple Accounts on One Domain: If you have multiple usernames or profiles for a single service (such as multiple Google, Microsoft, or streaming accounts), the app lists each account under the primary service name. Tapping that service displays the different usernames associated with the domain.
  • Domain Matching and Subdomains: The app automatically associates logins across related subdomains. For example, credentials saved for login.example.com are identified as valid for example.com, preventing duplicate entries for different subpages of the same provider.
  • Shared Web Credentials: For companies operating multiple distinct domains under one authentication system (such as apple.com and icloud.com), the app uses Apple's Shared Web Credentials system to recognize that one login works across both sites.

Sorting and Viewing Controls

Within any category or list view, items are grouped alphabetically by default using the domain name or service title. Users can adjust the view by tapping the sort icon in the toolbar to organize items by:

  • Title (A to Z or Z to A)
  • Recently Created
  • Recently Modified

This organization ensures that credentials remain segmented by functional type at the top level, while individual website identities remain consolidated and easily searchable at the domain level.