Testing passkey support. Is it supposed to be this difficult?

Hello @LeVeL5! 👋

Thank you for reaching out. So that I can better undertstand the situation, and advise appropriately, can you tell me:

1. Are you trying to sign into 1Password itself using a passkey?
2. Are you trying to sign into other websites/apps on a device that doesn't have 1Password installed?

Or are you trying to do something else?

Also, I can change the default passkey and password provider in iOS (Home screen -> Settings -> Passwords -> Password Options, then enable or disable password/passkey providers), but not on Mac OS, which has the same menu and options, but the only provider is iCloud Keychain.

1Password on the Mac doesn't use the "Autofill & Passwords" feature in macOS System Settings so you won't see it listed there. Instead you can fill and save logins using either 1Password in the browser (our browser extension) or using Universal Autofill:

• Use Universal Autofill in apps and browsers on your Mac
• Get to know 1Password in your browser

If you don't see 1Password in Safari then try the steps in this article: If you don't see the 1Password icon in your browser's toolbar

Let me know if that doesn't work. 🙂

-Dave

Hi Dave,

Thank you very much for replying. I'm testing passkeys to see how they work in a best-case scenario, like authenticating on iOS and Mac where 1Password is installed as well as all requisite browser extensions, and also in cases where I would have to use a loaner device and rely on another family admin and their devices for authentication in case of an emergency.

I didn't know I could sign in to 1Password using a passkey... My test consisted on enabling passkeys on a single Yahoo account and test different scenarios to understand how the process would be different in every case and to plan ahead, so the case is actually #2. I admit I was surprised by the Firefox prompt not mentioning a Mac, because it's easier to lose a mobile device than one that's always at home.

I kinda expected a 1Password notification to pop up on one of my devices, but that may be borne out of complete ignorance on my part about how passkeys actually work.

I do get why they're more secure, but I'm also curious as to how consistent would the experience be across platforms and browsers, or how things like the Mac's Internet Accounts would authenticate with passkeys too, as the OAuth authentication opens a webview that wouldn't be running the 1Password browser extension... Too many things to think about but I want to be thorough and responsible.

@LeVeL5

Thank you for those details. On a device that you own, I recommend that you use 1Password in the browser to sign in using a passkey since that will provide you with the best experience.

On other devices, you can scan a QR code on that device using your mobile device and use 1Password on your mobile device (iOS or Android) to sign in using your saved passkey. You'll scan the QR code using the camera app on your mobile device and then tap on the prompt to open 1Password and allow the sign in.

how things like the Mac's Internet Accounts would authenticate with passkeys too, as the OAuth authentication opens a webview that wouldn't be running the 1Password browser extension

At the moment, choosing the QR code option when you're prompted for your passkey and scanning that QR code using your mobile device to sign in with a passkey saved in 1Password is the best option for this scenario as well.

Let me know if you run into any issues or have any questions.

-Dave

That sounds reasonable and I'll keep it mind. I'll continue doing testing with passkeys and increasing the security of my accounts.

Thank you very much, Dave!

On behalf of Dave, you're welcome.

I had not tried in a while after failed attempts to get a Yahoo passkey in US besides the Japan area.
So just tried yesterday and sorta accidentally after trying several times to get one it finally happened and I was successful.
After my first attempt after saving the passkey to 1Password and then trying to use it, it would still prompt a QR code that was not necessary for my basic iOS sign in.
What I noticed was if I am right about this my hardware key being enabled on Yahoo caused the repeated passkey QR code even after I got a passkey.
So I removed my hardware key and then went back to one time password authentication and after that the passkey worked without the QR code and it just recognized the passkey and then website server wanted the one time authentication in addition which is fine.
With passkey I probably do not need the hardware key for Yahoo, but I still keep 2fa enabled, because they still allow password attempts even if you get a passkey for now.
So I am good and happy that I have a passkey that works on yahoo.