Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Add passkey AND two-factor authentication to logins
1Password told me I could add a passkey to my YouTube account which i've now done, but it now tells me I can add two-factor authentication and I get the alert on the login whenever I view it.
Don't passkeys mean that 2FA are no longer required or is the recommendation to add passkeys and two-factor authentication to every account that supports it? Thanks
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
5 Replies
Ok thanks. I’ll keep that in mind while I’m still using passwords.
- 1P_Dave
Moderator
Hello reck! 👋
Thanks for the question! Unlike passwords, you can’t create a weak passkey. Passkeys are generated by your device using a public-private key pair, which makes them strong and unique by default. Passkeys can’t be phished like a traditional password because the underlying private key never leaves 1Password – this also makes them resistant to social engineering scams.
Two-factor authentication was designed to add an additional layer of protection to passwords against phishing. Passkeys are already resistant to phishing and can be considered to have the same level of security as a password plus two-factor authentication, with a lot less friction.
That being said, as far as I'm aware Youtube will still allow you to log in using your password and there isn't yet an option to get rid of your password entirely. There are also some devices or websites that might not yet support passkeys so keeping your password for now, protected with two-factor authentication, is a good idea.
-Dave
Ah, thanks for this explanation 1P_Dave​ !
I too was very confused why I've added a passkey to my item, but 1Password still prompts me to add "two-factor authentication" as well. Passkeys are better than 2FA from everything I've learned, and 1Password's prompt doesn't say anything about how it adds more protection than the passkey already does.
Maybe the prompt verbiage could be clarified that even with a passkey, 2FA remains important while sites continue accepting passwords.
- 1P_Timothy
Community Manager
On behalf of Dave, you are very welcome nukmicah​!
It can be hard to cover every situation in a brief prompt, but I would agree some additional clarification around the passkey / 2FA overlap could be helpful. While I can't say this is something that will be changed, I've shared your comments with the team.
Thanks for your consideration and feedback on this. If we can help with anything, feel free to reach out!
49283627
