Maybe but this is unexpected if you need to restore from a backup..

ryandrake an hour ago | parent | next [-]

It's unexpected to anyone with intuition about how a computer traditionally is supposed to work. As a general principle, as a user, I expect a file on one computer to be usable on another computer. Or, at the very least, if I need to obtain some other thing from the original computer to "unlock" that file, I should be able to do it. The idea of a file that is only usable on a particular computer feels weird.

	▲	GeekyBear 4 minutes ago \| parent [-]
		> As a general principle, as a user, I expect a file on one computer to be usable on another computer. As a general rule, I expect a file on an encrypted disk to be unreadable for anyone who lacks the encryption key(s).

▲

petronic an hour ago | parent | prev | next [-]

I've done Tahoe-to-Tahoe migration assistant moves between machines in recent months. No issues with login keychain migration.

	▲	winstonwinston an hour ago \| parent \| next [-]
		But that’s not backup restore? I’m thinking Time Machine restore on a new Mac when old one is no longer working. Or when the old one had to be wiped and restored.
	▲	lapcat 28 minutes ago \| parent \| prev [-]
		Migration Assistant uses the old Mac, which can unlock its login keychain and allow the keychain items to be copied.

▲

__MatrixMan__ an hour ago | parent | prev [-]

Don't backup keys, rotate them.

▲

gavinsyancey an hour ago | parent [-]

I can't rotate my keys if I lose access to accounts because my computer died and my backup is useless.

	▲	__MatrixMan__ 26 minutes ago \| parent [-]
		Yeah, that's why secure enclaves embedded in complex devices are a bad idea. Hardware keys are the way: - Less likely to fail in the first place - Cheap enough to have several of so you can use one to log in and manage the others in the event of loss - Easy to move between devices - Less likely to use the auth handshake as a side channel for things you didn't consent to