In iOS 18, Apple spun off its Keychain password management tool into a standalone app called Passwords. A serious HTTP bug left Passwords users vulnerable to phishing attacks for nearly three months.