[quote='884502022, iceboy, /thread/822626?answerId=884502022#884502022, /profile/iceboy'] If I do not set kSecAttrAccount right now, is it possible that I cannot read the keychain items correctly? [/quote] It’s hard to answer this because you’ve phrased it as a negative question. So, lemme rephrase it: If I’m using the data protection keychain (the default on iOS, something you have to opt in to on macOS), And I create a generic password keychain item without specifying kSecAttrAccount, Will I be able to access that item’s contents using SecItemCopyMatching? The answer to that is “Yes.” At the end of this post I’ve included some code that I used to test this. (Sorry it’s in Swift. I built this by cobbling together various existing bits of code that were all written in Swift, and I don’t have time today to convert them to Objective-C.) Having said that, my advice is that, when you creating a generic password item you always populate both kSecAttrService and kSecAttrAccount. If you don’t have a sensible value t