Why does my iPhone keep asking for a CardDAV password?
Why does my iPhone keep asking for a CardDAV password?
Your iPhone keeps asking for a CardDAV password because one of its contacts accounts cannot authenticate with the service that provides those contacts. That service might be a work address book, a third-party contacts provider, or a self-hosted CardDAV server.
The prompt usually appears because the password is wrong, the account details are out of date, an app-specific password is needed, or a managed CardDAV profile has installed without sending the password correctly.
A CardDAV account is one way an iPhone can sync contacts from an external service into the Contacts app. For a plain English explanation of the protocol, see our guide: What is CardDAV?
CardDAV password prompts are confusing because the iPhone can show a similar message for several different problems. A wrong password, an expired app password, a bad server address, and a missing password in a managed profile can all look like a simple password issue on the phone.
This guide explains what a CardDAV password is, where it usually comes from, how to reset it, and what IT admins should check when the problem happens on managed iPhones.
What is a CardDAV password?
A CardDAV password is the password used to authenticate a CardDAV contacts account.
CardDAV is an open standard for syncing contacts between a contacts service and a device. On an iPhone, a CardDAV account can add contacts to the native Contacts app. Apple supports CardDAV account settings on managed devices through its Contacts payload, including hostname, username and account password.
Tip đź’ˇ:For a deeper comparison with directory-based contact lookup, see our guide to CardDAV vs LDAP.
A CardDAV password is not one single password shared by all services. It depends on the provider or system that created the contacts account.
It might be:
- a normal account password
- an app-specific password
- a generated CardDAV password
- a password created by your IT team
- a password included inside a managed device profile
The important point is this: the iPhone does not create the CardDAV password. It only uses the password supplied by the contacts provider, server, or MDM profile.
Why is CardDAV asking for a password?
| Situation | Most likely cause | What to check first |
|---|---|---|
| You added the CardDAV account yourself | Wrong password, wrong username, wrong server address, or app-specific password needed | Check the account details with the service that provides the contacts |
| The CardDAV account came from work | The password may be managed by IT or deployed through MDM | Ask IT whether the profile includes the CardDAV username and password |
| The prompt says “password incorrect” | The iPhone tried to authenticate and failed | Re-enter the password or create a new app-specific password if your provider requires one |
| The account is iCloud / Apple | Apple does not normally show a separate “CardDAV password” on the iPhone | Use Apple’s built-in iCloud account setup, or an Apple app-specific password only where a third-party client requires it |
| The account is Google | Google accounts usually use Google sign-in rather than a separate CardDAV password | Add the Google account through iOS account settings, or ask your Google Workspace admin about contact sync |
| The account is Yahoo, Fastmail or a similar provider | The provider may require an app password for third-party contact access | Generate a new app password in the provider’s account settings |
| Contacts were deployed through MDM at scale | The profile may have installed the CardDAV account but not passed the password correctly | If uploaded .mobileconfig profiles trigger repeated password prompts, create the CardDAV payload directly in the MDM console and enter the hostname, username and password manually. |
| The account is self-hosted | Server URL, SSL certificate, redirects, or account permissions may be wrong | Check the CardDAV server logs and configuration |
How do I know if CardDAV was installed by a profile?
On an iPhone, a manually added CardDAV account is usually checked under Settings > Contacts > Accounts.
If the account was installed by work, school, or an MDM system, you may also see a configuration profile under Settings > General > VPN & Device Management. This screen shows that a profile has been installed on the iPhone. It does not prove that the CardDAV password is correct, or that the password was passed to the device successfully.
What details does a CardDAV account need?
A CardDAV password is only one part of the account setup. A CardDAV account usually needs a server address, username, password, SSL setting and, in some systems, a port number.
| Setting | What it means |
|---|---|
| Server address / hostname | The CardDAV server or contacts service your iPhone connects to |
| Port | The network port used for the connection. For secure HTTPS/CardDAV connections, this is usually 443 |
| Username | The account name used for the CardDAV connection |
| Password | The credential used to authenticate the account |
| SSL setting | Whether the connection uses HTTPS/SSL. This should normally be enabled for secure CardDAV services |
| Principal URL | An optional server path used by some CardDAV services |
If any of these details are wrong, the iPhone may ask for the password again. For example, a correct password can still fail if the username, server address, SSL setting, port number or principal URL is wrong.
In many MDM systems, the hostname and port are entered separately. If the CardDAV service uses HTTPS, SSL should normally be enabled and the port is usually 443, unless your provider gives you different instructions.
On managed devices, these account details may be installed by a configuration profile. If the profile installs the CardDAV account but does not include the password correctly, or if the MDM uses the wrong SSL or port settings, the user may be asked to enter the password after the profile installs.
Where do I find my CardDAV password?
You usually cannot find or view a saved CardDAV password on the iPhone itself. You need to get it from the service, provider, server, or IT system that created the CardDAV account.
Where to look depends on the type of contacts account.
| Account type | Where to look |
|---|---|
| Third-party CardDAV service | Check the service’s account settings or setup page for the CardDAV username and password |
| Self-hosted CardDAV server | Ask the server admin or check the hosting/control panel account settings |
| Yahoo, Fastmail or similar providers | Generate a new app-specific password in the provider’s account settings |
| iCloud / Apple Account | Use Apple’s built-in iCloud account setup; only use an Apple app-specific password if a third-party contact client asks for one |
| Google account | Use Google sign-in or iOS Google account setup, rather than looking for a separate visible CardDAV password |
| Work-managed account | Ask your IT team; the password may be entered into an MDM payload or included in a configuration profile |
| MDM-deployed shared contacts | Check the MDM CardDAV payload or profile settings, especially the hostname, username and password fields |
| Contact management tools such as Contactzilla, SyncBlue or Cirrus Sync | Check the tool’s CardDAV/device connection settings; the tool may generate credentials for a specific connection |
If you are not the administrator, the safest answer is to ask whoever created the contacts account. That might be your IT team, your contact management provider, or the person who manages the CardDAV server.
Do not assume the CardDAV password is your Apple ID, Google password or main email password. Some providers use app-specific passwords or managed authentication instead.
Does every contacts provider have a CardDAV password?
Apple and Google accounts usually do not give you a separate “CardDAV password” to find on the iPhone. They normally use their own account sign-in flows, and Apple may use app-specific passwords for some third-party access to iCloud contacts.
A self-hosted CardDAV server or third-party contact management tool is different. In those setups, you are more likely to have a specific CardDAV server address, username and password.
So if your iPhone asks for a CardDAV password, first identify which contacts account is asking. The password may be an app-specific password, a generated CardDAV password, or a credential managed by IT.
What is my Apple, Google, Yahoo or Fastmail CardDAV password?
Different providers handle CardDAV passwords in different ways. This is why it is worth checking which contacts account is actually causing the prompt before trying random passwords.
What is my Apple CardDAV password?
Apple does not normally give you a separate “Apple CardDAV password” to find on the iPhone.
If you are using iCloud Contacts on an iPhone, Apple usually handles this through the built-in iCloud account setup. If a third-party contacts app or CardDAV client needs access to iCloud contacts, Apple may require an app-specific password instead of your main Apple Account password.
What is my Google CardDAV password?
For Google accounts, you usually should not look for a separate Google CardDAV password.
Google’s CardDAV interface requires OAuth 2.0, which means sign-in is handled through Google rather than by typing a standalone CardDAV password. For most iPhone users, the better route is to add the Google account through iOS account settings and let Google handle authentication.
Tip đź’ˇ:For the wider Google Workspace shared-contact problem, see our guide to Google Workspace shared contacts.
What is my Yahoo or Fastmail CardDAV password?
Yahoo, Fastmail and similar providers may require an app-specific password for CardDAV access.
This is especially likely if two-factor authentication is enabled or if the account is being added to a third-party contacts client. The usual fix is to generate a new app password in the provider’s account settings and use that for the CardDAV account.
How do I fix a CardDAV password prompt on iPhone?
Start by checking which contacts account is asking for the password.
On iPhone, CardDAV accounts are usually found under:
Settings > Contacts > Accounts
Depending on your iOS version, this may also appear under Settings > Apps > Contacts > Contacts Accounts, or through the Mail/Accounts settings.
Once you are in the accounts list, look for the CardDAV account or any contacts account you do not recognise. This helps you work out whether the prompt is coming from Apple, Google, Yahoo, a work address book, a third-party CardDAV service, or a self-hosted server.
For a manually added CardDAV account, check the server address, username, password, SSL setting and port. A correct password can still fail if one of the other account details is wrong.
For Apple or Google accounts, avoid looking for a separate CardDAV password. Use the normal iCloud or Google account setup in iOS instead. For Yahoo, Fastmail and similar providers, generate a new app-specific password and use that in the CardDAV account.
For self-hosted CardDAV servers, reset the password at the server and check the server URL, path, SSL certificate and permissions.
For work-managed or MDM-deployed accounts, ask IT to update the profile or CardDAV payload. If a .mobileconfig upload causes repeated prompts, the MDM may need a native CardDAV payload with the hostname, username and password entered manually.
A CardDAV password is normally changed at the source, not inside the iPhone Contacts app. The iPhone uses the password, but it usually does not create, manage or reveal it.
MDM-deployed CardDAV accounts and password prompts
If a CardDAV account was deployed through MDM, the user should not normally need to enter the CardDAV password manually.
With Contactzilla, the iPhone setup is delivered as a .mobileconfig configuration profile which is uploaded directly to your MDM. This file can include the CardDAV hostname, username, password and account settings needed to add the contacts account to the iPhone.
For most MDM deployments, that works as expected. The MDM installs the profile, the iPhone creates the CardDAV account, and contacts start syncing to the native Contacts app.
If users keep seeing a CardDAV password prompt after deployment, there are three common fixes.
1) Generate a new CardDAV configuration profile
The first option is to create a fresh CardDAV/device connection in your contact management system and download a new .mobileconfig file.
Then:
- remove the old profile from the affected devices
- upload the new .mobileconfig file to the MDM
- assign it to the correct device group or policy
- check whether the prompt disappears after the new profile installs
This can fix issues caused by an old profile, stale credentials, or a previous connection that is no longer valid.
2) Remove the old CardDAV account from the device
Sometimes the iPhone is still trying to sync against an old CardDAV connection that no longer exists.
This can happen if the original device connection was deleted in the contact management system, but the CardDAV account remains installed on the iPhone. The address book may still appear on the device, but the account is now pointing at credentials that are no longer valid.
In that case:
- remove the old CardDAV account or profile from the device
- create a new CardDAV/device connection for the address book
- deploy the new profile or CardDAV payload through your MDM
- confirm that the new account syncs without prompting
3) Create the CardDAV payload directly in the MDM’s native CardDAV payload
If uploading the .mobileconfig file still causes password prompts, the MDM may not be passing the password field correctly.
In that case, create the account using the MDM’s native CardDAV payload, rather than uploading the .mobileconfig file.
| Field | What to enter |
|---|---|
| Hostname / server | The CardDAV server address |
| Username | The generated CardDAV username |
| Password | The generated CardDAV password |
| Account description | A clear name for the contacts account |
| SSL | Enabled, if required by the provider |
We have seen this behaviour in some MDM environments, in particular IBM MaaS360. In those cases, manually entering the CardDAV details into the MDM’s own CardDAV payloadfixes the issue so we recommend that over the mobile confiog upload.
For a practical walkthrough, see our MaaS360 CardDAV setup guide for manually entering CardDAV details.
Tip đź’ˇ: Related MDM guides: Contactzilla also has walkthroughs for deploying iPhone contacts with Jamf Pro, Microsoft Intune, Workspace ONE, and IBM MaaS360.
How Contactzilla CardDAV passwords work
Contactzilla creates CardDAV device connections for syncing address books to iPhones, iPads and other devices.
For iOS deployments, Contactzilla can generate a .mobileconfig configuration profile. This profile contains the CardDAV settings the device needs, including the hostname, username and generated password.
That means the password is already included in the configuration profile you upload to your MDM. In most cases, users do not need to see or type the password manually.
Contactzilla also lets admins reveal the generated CardDAV password from the dashboard. For security reasons, this password is only visible until the first connection. The dashboard message explains:
“This password will only be visible until the first connection. If you intend to use this connection for more than a single device please make a secure note of the password.”
A Contactzilla CardDAV password belongs to that specific device connection. If you later need to enter the password manually — for example, when using an MDM’s native CardDAV payload instead of uploading the .mobileconfig file — and the password is no longer visible, create a new device connection.
The clean fix is then to deploy the new .mobileconfig profile, or copy the new CardDAV hostname, username and password into the MDM’s native CardDAV payload.
FAQ: CardDAV password prompts on iPhone
What is a CardDAV password?
A CardDAV password is the password used to authenticate a CardDAV contacts account. It may be a normal account password, an app-specific password, a generated CardDAV password, or a credential included in a managed device profile.
Where do I find my CardDAV password?
You usually cannot view a saved CardDAV password on the iPhone itself. You need to get it from the service, provider, server, contact management tool, or IT system that created the CardDAV account.
How do I reset my CardDAV password?
A CardDAV password is normally reset at the source, not inside the iPhone Contacts app. Use your provider’s account settings, generate a new app password, reset the server password, or ask IT to update the MDM profile.
What is my Google CardDAV password?
Google accounts usually do not provide a separate visible “Google CardDAV password” for iPhone setup. In most cases, add the Google account through iOS account settings and let Google handle sign-in. Google Workspace contact sync may also depend on admin settings.
Is my CardDAV password the same as my Apple ID password?
An Apple or iCloud contacts setup usually does not involve finding a separate CardDAV password on the iPhone. If a third-party contacts app needs access to iCloud contacts, Apple may require an app-specific password instead of your main Apple Account password.
Why does my iPhone say my CardDAV password is incorrect?
Your iPhone says the CardDAV password is incorrect when it cannot authenticate the contacts account. The cause may be a wrong password, wrong username, wrong server address, expired app password, SSL issue, duplicate account, or missing credentials in a managed profile.
Why does CardDAV keep asking for a password after MDM deployment?
CardDAV may keep asking for a password after MDM deployment if the profile installs the account but does not pass the password correctly. If this happens, create a new profile or configure the account using the MDM’s native CardDAV payload.
Can I recover a Contactzilla CardDAV password?
A Contactzilla CardDAV password is only visible in the dashboard until the first connection. If you need the password later and did not save it, create a new device connection and deploy the new profile or CardDAV payload.
