If you’re like me, you’ve moved to using smart cards and Apple Pay whenever possible for all your in-person purchases, phone orders, and online purchases. Apple Pay requires you to sign up for credit and debit cards, and the back-end infrastructure does all the security for you. Safari for macOS can transfer Apple Pay authorization to an iPhone, iPad, or Watch if your Mac doesn’t have Touch ID (built-in or activated with Magic Keyboard with Touch ID).
However, you can also manually enter map information in Safari. On macOS it’s via Safari > Preferences/Preferences > Autocomplete by clicking “Change” next to “Credit Cards”. On iOS/iPadOS go to Settings > Safari > Credit cards. You provide your name as it appears on the card, its number, expiration date and the verification code printed on the card. This information is synced through iCloud Keychain, if enabled.
When you use autofill to enter a credit card, Safari uses local data storage:
- If you enter a verification code (most commonly referred to as CVV or CVC) in Safari’s autofill settings, Safari will fill it out if it recognizes the field after using Touch ID, Face ID, or your device’s passcode.
- If you don’t enter it in Safari’s map settings, you can reserve this as an extra step for yourself – another bar to avoid accidental spending or give yourself more time!

Some sites design their forms in such a way as to prevent automatic completion of the verification code. In this case, you can:
- Find it on your map to enter.
- Pick it up from a password manager like 1Password if you keep it there.
- Go to Safari preferences (easier on Mac) and click or tap on the icon Security code field to show the number.
Ask Mac 911
We’ve compiled a list of the questions we get asked most frequently, along with answers and column links: read our super FAQ to see if your question is covered. If not, we are always looking for new problems to solve! Send your email to mac911@macworld.com, including appropriate screenshots and indicating if you would like your full name to be used. Not every question will be answered, we do not answer emails, and cannot provide direct troubleshooting advice.