Skip to main content
Nov 2, 2026 5:21 PM UTC
Question

1Password PRF Support in macOS Applications

PRF extension for passkeys in macOS AutoFill (native apps)?

Hi all. I'm building an app and it uses the WebAuthn **PRF extension** to seal each user's recovery key to their passkey, as your [July 2024 post](https://1password.com/blog/encrypt-data-saved-passkeys) describes for the browser extension, Android and iOS.

What the app does (macOS 15+ APIs):

let request = ASAuthorizationPlatformPublicKeyCredentialProvider(relyingPartyIdentifier: "filecellar.app")
    .createCredentialAssertionRequest(challenge: challenge)
request.allowedCredentials = [...]           // the user's own passkeys
request.userVerificationPreference = .required
request.prf = .inputValues(.init(saltInput1: salt))
// then read ASAuthorizationPlatformPublicKeyCredentialAssertion.prf?.first

What happens:
• With an iCloud Keychain passkey, the assertion comes back with the PRF output as expected.
• With a 1Password passkey picked through macOS AutoFill (the 1Password Autofill Extension), the assertion succeeds but `prf` is **nil**, so we can't use it.
• Separately, after that attempt the Autofill Extension left a blank white window that couldn't be closed. We had to quit the extension process to clear it.

Environment: 

macOS 27.0.1, 1Password for Mac 8.12.44 (beta).

Questions:
1. Does 1Password's macOS credential provider support PRF on assertion (and registration)? Since macOS 15, Apple has passed PRF inputs and outputs through to credential provider extensions.
2. If not, is it on the roadmap?