Apple Passwords CSV columns explained
Column names tell an importer what each value means. This guide describes the six fields written by PortaPass’s Apple-format exporter, not an Apple-published schema or a guarantee of destination acceptance. Keep their relationship intact and verify the import result.
Title and URL
Title is the human-readable service name. URL identifies the website or app location associated with the login. When a title is absent, a trustworthy converter can derive a display label from the domain without changing the underlying password. A missing or malformed URL should be reviewed because matching and AutoFill may depend on it.
Username and Password
These are the credential fields. An empty username can be legitimate for unusual services, but an empty password is usually a broken row and should not be passed through unnoticed. Password previews should stay redacted by default, and any explicit reveal should require device authentication.
Notes
Notes may contain recovery hints, account context, or other sensitive material. They need proper CSV escaping when they contain commas, quotes or line breaks. PortaPass treats notes as sensitive data, clears imported values from memory at the end of a session, and hides app content when the app leaves the foreground.
OTPAuth
OTPAuth can carry a provisioning URI for a time-based one-time code. It is as sensitive as a password because it may enable the second authentication factor. PortaPass preserves this field in Apple-format exports. Never paste an OTPAuth value into a website tool, support message or analytics form.