A keychain agent
At WWDC 2026, Apple introduced one of the day's most concrete features: the Passwords app no longer just flags at-risk credentials — it acts on them. According to CNBC, the app uses Apple Intelligence and Safari to autonomously visit each website, sign in, and replace weak or compromised passwords with strong ones, requiring only a single confirming tap from the user.
MacRumors notes that Apple explicitly calls this capability "agentic": Apple Intelligence and Safari securely navigate through websites, sign in, and upgrade accounts, with the entire operation surfacing as a Live Activity on screen. Apple states that no browsing data is shared with Apple or any third party.
Why it matters
The difference between a notification and an action is precisely what separates a useful password manager from an ignored one. Most people dismiss credential warnings because the manual update process is tedious. Delegating it to a background agent removes the main friction point. The quality of the implementation — and the solidity of Apple's privacy guarantees — will only be verified in real use, but the direction is sound.