But you still need to unlock the keychain to get those... so what’s the difference?

If anything, the new iMac pro has a Secure Enclave, which means we can soon expect in some number of years that most computers will as well.

> If anything, the new iMac pro has a Secure Enclave, which means we can soon expect in some number of years that most computers will as well.

I don't know about Macs but PCs have a Smart-Card like Chip called TPM build in for about 20 years by now.

One of the main functions a TPM offers is the secure storage of encryption keys.

I wonder such a feature comes only now to Macs with about two decades of a delay?

I mean, TPMs only started appearing in laptops in the mid 2000s, but whatever. Unlike the TPM on most non-Apple laptops I've bought recently, the OSX secure enclave does significantly impact the security of the system. I don't know why Apple decided to create their own instead of using the standard TPM, but they've done a pretty good job of using it, unlike most other hardware vendors.

Not correct. Unless you're specifically talking about some stuff by Apple.

Do you know that windows has had password stores for many decades?

Which part was not correct? macOS does indeed have, and has long had, a keychain API, if that’s the part you’re thinking of.