If you’re like me, you’ve opted for chip-based payment cards and Apple Pay wherever possible for all of your in-person, phone, and online purchases. Apple Pay requires you to register credit and debit cards, and the backend infrastructure handles all the security for you. Safari for macOS can passthrough to an iPhone, iPad, or watch for Apple Pay authorization if the Mac doesn’t have Touch ID (built-in or enabled via a Magic Keyboard with Touch ID).
However, you can also enter card information manually in Safari. In macOS, it is via Safari > Preferences/Settings > Autofill by clicking on Edit next to “Credit cards”. In iOS/iPadOS, go to Settings > Safari > Credit card. You provide your name as it appears on the card, its number, expiration, and the verification code found printed on the card. This information syncs through iCloud Keychain if you have it enabled.
When you use autofill to enter a credit card, Safari pulls from its local data store:
- If you enter the verification code (most often called CVV or CVC) in Safari’s autofill settings, Safari will fill it in if it recognizes the field after using Touch ID, Face ID, or your device’s password .
- If you don’t enter it in Safari’s map preferences, you can reserve this as an extra step for yourself – another bar to avoid accidentally spending or giving yourself extra time!
Some sites design their forms to prevent the verification code from autofilling. In this case, you can:
- Look at it on your map to enter.
- Pull it from a password manager, like 1Password, if you store it there.
- Go to Safari settings (easier on a Mac) and click or tap the security code field to reveal the number.
Ask for Mac 911
We’ve compiled a list of our most frequently asked questions, along with answers and column links: read our awesome FAQ to see if your question is covered. Otherwise, we are always looking for new problems to solve! Email yours to [email protected], including screenshots if available and if you want your full name used. Not all questions will be answered, we don’t respond to emails, and we can’t provide direct troubleshooting advice.