Question

1Password has a passkey but supplies an email/password for Amazon logins

Forum|Forum|1 year ago
November 3, 2024
3 replies
225 views

On Amazon I created a passkey which is stored in the 1Password entry. But Amazon logins are still executed with the email/password pair. What's required to force a login with the passkey?

1Password Version: 1Password for Windows 8.10.52 (81052014)
Extension Version: Not Provided
OS Version: Windows 11
Browser: Firefox/Edge

Browser Extension

1

1P_Evon

1Password Employee

Hello, @Nishtom. Thank you for writing in.

I've done some testing on my end and haven't been able to recreate the problem using Google Chrome. However, the passkey prompt on Amazon.com did not appear for me when using Firefox or Edge.

Could you please confirm whether the issue occurs in both Firefox and Edge? Can you check if the behaviour happens using Google Chrome?

-Evon

ref: dev/core/core#33860

N

NishtomAuthor

I reproduced the problem in Edge while logging into Amazon.com. The email/phone prompt appears; no passkey prompt until I supply the account password. But it is only displayed briefly then disappears when the login completes.

Tom

1

1P_Evon

1Password Employee

@Nishtom,

Thank you for your reply. The passkey prompt should appear when you navigate to Amazon's sign-in page before entering your email address. This problem does not occur in Google Chrome. I filed an issue for our development team for further investigation and added you as an affected user to our internal reporting. I'm sorry for the inconvenience.

It sounds like the passkey prompt briefly disappears due to the Autosubmit feature from the 1Password extension. If you manually enter your email address on Amazon's sign-in page, does the passkey prompt appear on the password page?

-Evon

B

boekelele

Hi Evon,

That is unfortunately wrong. The Passkey prompt appears only after you've supplied your e-mail or mobile phone number. It works like this:

First you have to enter your e-mail or mobile phone number. Passkey access is gated behind this:

Then on the next page, you can enter your Passkey by clicking on the button at the bottom:

("Meld je aan met een sleutelcode" is Dutch for "Sign yourself in with a passkey").

However, when 1Password auto-fills the e-mail, it'll automatically confirm, then enter the password and confirm, then enter the 2FA and confirm, completely ignoring the saved passkey.

Here's the full HTML for the button. The values have been slightly modified to make them illegitimate :)

<div id="auth-signin-via-passkey-section" class="a-section">
        <form name="signInWithPasskeyButton" method="post" action="" class="a-spacing-small">
    <input type="hidden" name="metadata1" value="true">
    <input type="hidden" name="webAuthnChallengeIdForButton" value="pX80hLWF7-kCpbz6Zs6n4_qJhYLFnNWb:EU">
    <input type="hidden" name="webAuthnGetParametersForButton" value="eyJycElkIjoiYW1hem9uLm5sIiwiY2hhbGxlbmdlIjoicFg4MGhMV0Y3LWtDcGJ6NlpzNm40X3FKaFlMRm5OV2IiLCJ0aW1lb3V0Ijo5MDAwMDAsImFsbG93Q3JlZGVudGlhbHMiOlt7ImlkIjoiYlJrUVJQNHRvSzkteWNxTjk2S04yUSIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfSx7ImlkIjoiTGRwb2ctNFAzVGpTQ1FDUW41MEwyZyIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfV0sIm1lZGlhdGlvbiI6bnVsbCwidXNlclCmdsAWNhdGlvbiI6InByZWZlcnJlZCJ9">
    <input type="hidden" name="openid.return_to" value="ape:aHR0cHM6Ly93d3cuYW1hem9uLm5sL2dwL2fdasNG9ob21lcGFnZS5odG1sL3JlZj1uYXZfeWFfc2lnbmlu">
    <input type="hidden" name="prevRID" value="ape:N1paWlZOV23fjdGRjQ5NU4=">
    <input type="hidden" name="workflowState" value="eyJ6aXAiOiJERUYiLCJlbmMiOiJBMjU2R0NNIi32fdfewgrgrIn0.SOdv8jlBZh8otmbAXUdGLKXT6AePzxcRF64Ye2VoBHuO4HRXf8UL1A.CYgCAzC1FOc7lxTf.4Q_BMpWCwKZUe9we-SgJ59qMQZy5N9J804vv3wZpGJbHzrOROVX123fwrgrwInSZ0lsmJdf8VlydbJWVqPJZ7Aa4lqaDJdV37EI9l2RWxzL_o8iWQCiY6RrTsstnZ4SNxsc6OGr6pG9_1Jp2tU4OmAzfnhy-KEZp596X5Ym6TG9e3Q0zEm1k1gdVe9bh5h6h6QpgsTxYMpC27ZWpCzX8vVvvAeRWm13CcgEb76LCoxaOkFi9hGKfMf70cIxNE2LGKrwPIgZuSyTkLdDjpCLjP_mC6XLL7uRJsEP2KIgkEjnhmGArjnNRXGoExEyTE24NimvRbHM64urWEpDlH-znS_H0IHhJZ7c-wj_JCjWNgmyFOkr1jRVKOrsLNCxqJkIO53X7g544g5g541VhT4uVEUwYoFGcRQIrUCLLfo-rv0B66WmXce_AdektL5cF8_gAj5_aO6koBuOD5azvHGcAb8u_WaxC_jlx1XmaIFkXuJi5BTkXs3t-G_8qp7HongEWNXz69ayKO0N.MIvUpaIMXyj_76-HOhu1dA">
            <span class="a-declarative" data-action="SIGNIN_PASSKEY_COLLECT" data-signin_passkey_collect="{}">
                <script type="a-state" data-a-state="{"key":"autoClickData"}">{"weblabTreatment":"T1","isAutoClickEnabled":false}</script>
                <script type="a-state" data-a-state="{"key":"siwpMetadata"}">{"userAgentType":"Desktop"}</script>
                <span id="auth-signin-via-passkey-btn" class="a-button a-button-span12 a-button-base"><span class="a-button-inner"><button id="continue" tabindex="6" class="a-button-text" type="button">
                    Meld je aan met een sleutelcode
                </button></span></span>
            </span>
        </form>
    </div>

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO