Apple's Passwords app has a major security flaw. The company has since patched it, but if you haven't updated in a while, you're still vulnerable.

Apple has fixed a bug in the iOS Passwords app that allowed iPhone users to be susceptible to phishing attacks, potentially for years. In a note on its security page, the company described the issue as one where "a user in a privileged network position may be able to leak sensitive information.

In iOS 18, Apple spun off its Keychain password management tool—previously only tucked away in Settings—into a standalone app

Apple's Passwords app is convenient and easy to use. But a new report shows that it had a problem for a while—though only in rare circumstances.