Keychain's main purpose is to store passwords in a central file (hence the name, keychain) The keychain is unlocked by default. You can Lock the keychain, so you always have to provide the Keychain master password when entering a password protected site, or other password use on your computer. How secure is it? Maybe someone else can answer that. What security level do you need? You can apply a separate unlocking password just for keychain.