1Password has a passkey but supplies an email/password for Amazon logins

Hi Evon,

That is unfortunately wrong. The Passkey prompt appears only after you've supplied your e-mail or mobile phone number. It works like this:

First you have to enter your e-mail or mobile phone number. Passkey access is gated behind this:

Then on the next page, you can enter your Passkey by clicking on the button at the bottom:

("Meld je aan met een sleutelcode" is Dutch for "Sign yourself in with a passkey").

However, when 1Password auto-fills the e-mail, it'll automatically confirm, then enter the password and confirm, then enter the 2FA and confirm, completely ignoring the saved passkey.

Here's the full HTML for the button. The values have been slightly modified to make them illegitimate :)

<div id="auth-signin-via-passkey-section" class="a-section">
        <form name="signInWithPasskeyButton" method="post" action="" class="a-spacing-small">
    <input type="hidden" name="metadata1" value="true">
    <input type="hidden" name="webAuthnChallengeIdForButton" value="pX80hLWF7-kCpbz6Zs6n4_qJhYLFnNWb:EU">
    <input type="hidden" name="webAuthnGetParametersForButton" value="eyJycElkIjoiYW1hem9uLm5sIiwiY2hhbGxlbmdlIjoicFg4MGhMV0Y3LWtDcGJ6NlpzNm40X3FKaFlMRm5OV2IiLCJ0aW1lb3V0Ijo5MDAwMDAsImFsbG93Q3JlZGVudGlhbHMiOlt7ImlkIjoiYlJrUVJQNHRvSzkteWNxTjk2S04yUSIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfSx7ImlkIjoiTGRwb2ctNFAzVGpTQ1FDUW41MEwyZyIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfV0sIm1lZGlhdGlvbiI6bnVsbCwidXNlclCmdsAWNhdGlvbiI6InByZWZlcnJlZCJ9">
    <input type="hidden" name="openid.return_to" value="ape:aHR0cHM6Ly93d3cuYW1hem9uLm5sL2dwL2fdasNG9ob21lcGFnZS5odG1sL3JlZj1uYXZfeWFfc2lnbmlu">
    <input type="hidden" name="prevRID" value="ape:N1paWlZOV23fjdGRjQ5NU4=">
    <input type="hidden" name="workflowState" value="eyJ6aXAiOiJERUYiLCJlbmMiOiJBMjU2R0NNIi32fdfewgrgrIn0.SOdv8jlBZh8otmbAXUdGLKXT6AePzxcRF64Ye2VoBHuO4HRXf8UL1A.CYgCAzC1FOc7lxTf.4Q_BMpWCwKZUe9we-SgJ59qMQZy5N9J804vv3wZpGJbHzrOROVX123fwrgrwInSZ0lsmJdf8VlydbJWVqPJZ7Aa4lqaDJdV37EI9l2RWxzL_o8iWQCiY6RrTsstnZ4SNxsc6OGr6pG9_1Jp2tU4OmAzfnhy-KEZp596X5Ym6TG9e3Q0zEm1k1gdVe9bh5h6h6QpgsTxYMpC27ZWpCzX8vVvvAeRWm13CcgEb76LCoxaOkFi9hGKfMf70cIxNE2LGKrwPIgZuSyTkLdDjpCLjP_mC6XLL7uRJsEP2KIgkEjnhmGArjnNRXGoExEyTE24NimvRbHM64urWEpDlH-znS_H0IHhJZ7c-wj_JCjWNgmyFOkr1jRVKOrsLNCxqJkIO53X7g544g5g541VhT4uVEUwYoFGcRQIrUCLLfo-rv0B66WmXce_AdektL5cF8_gAj5_aO6koBuOD5azvHGcAb8u_WaxC_jlx1XmaIFkXuJi5BTkXs3t-G_8qp7HongEWNXz69ayKO0N.MIvUpaIMXyj_76-HOhu1dA">
            <span class="a-declarative" data-action="SIGNIN_PASSKEY_COLLECT" data-signin_passkey_collect="{}">
                <script type="a-state" data-a-state="{"key":"autoClickData"}">{"weblabTreatment":"T1","isAutoClickEnabled":false}</script>
                <script type="a-state" data-a-state="{"key":"siwpMetadata"}">{"userAgentType":"Desktop"}</script>
                <span id="auth-signin-via-passkey-btn" class="a-button a-button-span12 a-button-base"><span class="a-button-inner"><button id="continue" tabindex="6" class="a-button-text" type="button">
                    Meld je aan met een sleutelcode
                </button></span></span>
            </span>
        </form>
    </div>