If you’re like me, you’ve switched to using chipped payment cards and Apple Pay whenever possible for all of your in-person, phone orders, and online purchases. Apple Pay requires you to register credit and debit cards, and the backend infrastructure handles the entire security part for you. Safari for macOS can relay to an iPhone, iPad, or Watch for Apple Pay authorization if the Mac lacks Touch ID (built-in or enabled via a Magic Keyboard with Touch ID).
However, you can also manually enter card information in Safari. On macOS, that’s through Safari > Preferences/Settings > Autofill by clicking Edit next to “Credit cards.” On iOS/iPadOS, go to Settings > Safari > Credit Cards. You will provide your name that appears on the card, its number, its expiration, and the verification code that appears printed on the card. This information syncs through iCloud Keychain if you enable it.
When you use autofill to enter a credit card, Safari pulls from its local data store:
- If you enter the verification code (usually labeled CVV or CVC) in Safari’s autofill settings, Safari will fill it in if it recognizes the field after you use Touch ID, Face ID, or your device password.
- If you don’t put it in Safari card preferences, you can reserve it as an extra step for yourself—another bar to avoid accidental spending or give yourself more time!
Some sites have engineered their forms to prevent auto-filling of the verification code. In that case, you can:
- Look for it on your card to enter.
- Get it from a password manager, like 1Password, if you keep it there.
- Go to Safari settings (easier on Mac) and click or tap on Security Code field to reveal the number.
Ask for Mac 911
We’ve compiled a list of questions we get asked frequently, along with answers and links to the columns: read our super FAQ to see if your question is covered. Otherwise, we’re always looking for new problems to solve! Email yours to mac911@macworld.com, including screen captures if appropriate and if you want to use your full name. Not all questions can be answered, we don’t respond to email, and we can’t provide direct troubleshooting advice.