Forum Discussion

Nishtom's avatar
Nishtom
New Contributor
11 months ago

1Password has a passkey but supplies an email/password for Amazon logins

On Amazon I created a passkey which is stored in the 1Password entry. But Amazon logins are still executed with the email/password pair. What's required to force a login with the passkey? 1...
browser extension
1P_Evon's avatar
1P_Evon
Icon for 1Password Team rank1Password Team
11 months ago

Nishtom,

Thank you for your reply. The passkey prompt should appear when you navigate to Amazon's sign-in page before entering your email address. This problem does not occur in Google Chrome. I filed an issue for our development team for further investigation and added you as an affected user to our internal reporting. I'm sorry for the inconvenience.

It sounds like the passkey prompt briefly disappears due to the Autosubmit feature from the 1Password extension. If you manually enter your email address on Amazon's sign-in page, does the passkey prompt appear on the password page?

-Evon

boekelele's avatar
boekelele
New Contributor
8 months ago

Hi Evon,

That is unfortunately wrong. The Passkey prompt appears only after you've supplied your e-mail or mobile phone number. It works like this:

First you have to enter your e-mail or mobile phone number. Passkey access is gated behind this:

Then on the next page, you can enter your Passkey by clicking on the button at the bottom:

("Meld je aan met een sleutelcode" is Dutch for "Sign yourself in with a passkey").

However, when 1Password auto-fills the e-mail, it'll automatically confirm, then enter the password and confirm, then enter the 2FA and confirm, completely ignoring the saved passkey.

Here's the full HTML for the button. The values have been slightly modified to make them illegitimate :)

<div id="auth-signin-via-passkey-section" class="a-section">
        <form name="signInWithPasskeyButton" method="post" action="" class="a-spacing-small">
    <input type="hidden" name="metadata1" value="true">
    <input type="hidden" name="webAuthnChallengeIdForButton" value="pX80hLWF7-kCpbz6Zs6n4_qJhYLFnNWb:EU">
    <input type="hidden" name="webAuthnGetParametersForButton" value="eyJycElkIjoiYW1hem9uLm5sIiwiY2hhbGxlbmdlIjoicFg4MGhMV0Y3LWtDcGJ6NlpzNm40X3FKaFlMRm5OV2IiLCJ0aW1lb3V0Ijo5MDAwMDAsImFsbG93Q3JlZGVudGlhbHMiOlt7ImlkIjoiYlJrUVJQNHRvSzkteWNxTjk2S04yUSIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfSx7ImlkIjoiTGRwb2ctNFAzVGpTQ1FDUW41MEwyZyIsInR5cGUiOiJwdWJsaWMta2V5IiwidHJhbnNwb3J0cyI6WyJpbnRlcm5hbCIsImh5YnJpZCJdfV0sIm1lZGlhdGlvbiI6bnVsbCwidXNlclCmdsAWNhdGlvbiI6InByZWZlcnJlZCJ9">
    <input type="hidden" name="openid.return_to" value="ape:aHR0cHM6Ly93d3cuYW1hem9uLm5sL2dwL2fdasNG9ob21lcGFnZS5odG1sL3JlZj1uYXZfeWFfc2lnbmlu">
    <input type="hidden" name="prevRID" value="ape:N1paWlZOV23fjdGRjQ5NU4=">
    <input type="hidden" name="workflowState" value="eyJ6aXAiOiJERUYiLCJlbmMiOiJBMjU2R0NNIi32fdfewgrgrIn0.SOdv8jlBZh8otmbAXUdGLKXT6AePzxcRF64Ye2VoBHuO4HRXf8UL1A.CYgCAzC1FOc7lxTf.4Q_BMpWCwKZUe9we-SgJ59qMQZy5N9J804vv3wZpGJbHzrOROVX123fwrgrwInSZ0lsmJdf8VlydbJWVqPJZ7Aa4lqaDJdV37EI9l2RWxzL_o8iWQCiY6RrTsstnZ4SNxsc6OGr6pG9_1Jp2tU4OmAzfnhy-KEZp596X5Ym6TG9e3Q0zEm1k1gdVe9bh5h6h6QpgsTxYMpC27ZWpCzX8vVvvAeRWm13CcgEb76LCoxaOkFi9hGKfMf70cIxNE2LGKrwPIgZuSyTkLdDjpCLjP_mC6XLL7uRJsEP2KIgkEjnhmGArjnNRXGoExEyTE24NimvRbHM64urWEpDlH-znS_H0IHhJZ7c-wj_JCjWNgmyFOkr1jRVKOrsLNCxqJkIO53X7g544g5g541VhT4uVEUwYoFGcRQIrUCLLfo-rv0B66WmXce_AdektL5cF8_gAj5_aO6koBuOD5azvHGcAb8u_WaxC_jlx1XmaIFkXuJi5BTkXs3t-G_8qp7HongEWNXz69ayKO0N.MIvUpaIMXyj_76-HOhu1dA">
            <span class="a-declarative" data-action="SIGNIN_PASSKEY_COLLECT" data-signin_passkey_collect="{}">
                <script type="a-state" data-a-state="{"key":"autoClickData"}">{"weblabTreatment":"T1","isAutoClickEnabled":false}</script>
                <script type="a-state" data-a-state="{"key":"siwpMetadata"}">{"userAgentType":"Desktop"}</script>
                <span id="auth-signin-via-passkey-btn" class="a-button a-button-span12 a-button-base"><span class="a-button-inner"><button id="continue" tabindex="6" class="a-button-text" type="button">
                    Meld je aan met een sleutelcode
                </button></span></span>
            </span>
        </form>
    </div>