Accessing 1Password with Passkey

The city I live in has had a lot of armed street robberies with groups of robbers targeting iPhones. They are getting more sophisticated. For example, they demand iPhone passcodes and quickly disable Find My iPhone. The keychain is easily read. That's why I don't use Keychain for any accounts. I use Screen Time to limit access to my Apple ID and iCloud account, but criminals will soon wise up to that.

Most consumers don't use separate password managers such as 1Password, so criminals probably focus on the keychain. I keep my 1Password app buried deep on my iPhone. There's a decent chance that robbers will not be aware of its presence during a robbery since there are practical time limitations before they jump back in their stolen cars and take off.

Risk of robbery is why I don't have any of my FIDO2 Yubikeys with me on the street. Since I don't use my keychain, I must use my master password to access the 1Password app on my phone. For phishing resistance, I want to use a passkey to access my 1Password account online.

For redundancy, I want multiple passkeys, which would be in 1Password and on my Yubikeys.

@1P_Dave I use a Windows computer, an android phone and an iPad. Only one of those has access to Apple Keychain.

So if I can only login to my vault with a single passkey, then the feature is kind of pointless to me, and as much as I'd love to use it, I'd be unable to for fear of being locked out of my account.

"Generally, we recommend adding as many trusted devices across platforms as possible."- again same issue, if only a single passkey is enabled, how is one supposed to do that?

Yubikeys can store passkeys. However, relying on a single hardware device for one of the most important login methods is just downright stupid.

I'd go so far as to say, if enabling multiple passkeys to access the vault isn't available on launch, then there shouldn't be a launch at all.

Also I hope any implementation of logging into the vault with passkeys is better than what Google, DocuSign and Adobe do. No username should be required.

Better examples to follow would be Github, Nintendo, Coinbase, or even Roblox. None of them require entering a username to use passkeys.

Or go a step further, and follow what Roblox or Best Buy does, where the login page immediately sends a WebAuthn request.

@XIII and @Haulien

Unlocking 1Password with a passkey is currently in private beta and we'll have more specifics to share when the public beta is released. That being said, while I can't confirm what the final implementation will look like, the ability to add multiple passkeys to an account is something that the team is already testing.

I use a Windows computer, an android phone and an iPad. Only one of those has access to Apple Keychain.

Even if you only save a passkey in iCloud Keychain (which is encrypted and synced to iCloud), you'll still be able to use your iPad to scan a QR code on your Android and Windows PC to sign in using that passkey. We are looking into allowing you to save multiple passkeys using your platform provider of choice.

We hope to share more soon. 🙂

-Dave