Forum Discussion

reck's avatar
reck
Frequent Contributor
2 years ago

Add passkey AND two-factor authentication to logins

1Password told me I could add a passkey to my YouTube account which i've now done, but it now tells me I can add two-factor authentication and I get the alert on the login whenever I view it. Don'...
browser extension
1P_Dave's avatar
1P_Dave
Icon for Moderator rankModerator
2 years ago

Hello reck! 👋

Thanks for the question! Unlike passwords, you can’t create a weak passkey. Passkeys are generated by your device using a public-private key pair, which makes them strong and unique by default. Passkeys can’t be phished like a traditional password because the underlying private key never leaves 1Password – this also makes them resistant to social engineering scams.

Two-factor authentication was designed to add an additional layer of protection to passwords against phishing. Passkeys are already resistant to phishing and can be considered to have the same level of security as a password plus two-factor authentication, with a lot less friction.

That being said, as far as I'm aware Youtube will still allow you to log in using your password and there isn't yet an option to get rid of your password entirely. There are also some devices or websites that might not yet support passkeys so keeping your password for now, protected with two-factor authentication, is a good idea.

-Dave

  • nukmicah's avatar
    nukmicah
    Dedicated Contributor
    3 months ago

    Ah, thanks for this explanation 1P_Dave​ !

    I too was very confused why I've added a passkey to my item, but 1Password still prompts me to add "two-factor authentication" as well. Passkeys are better than 2FA from everything I've learned, and 1Password's prompt doesn't say anything about how it adds more protection than the passkey already does.

    Maybe the prompt verbiage could be clarified that even with a passkey, 2FA remains important while sites continue accepting passwords.

     

    • 1P_Timothy's avatar
      1P_Timothy
      Icon for Community Manager rankCommunity Manager
      3 months ago

      On behalf of Dave, you are very welcome nukmicah​!

      It can be hard to cover every situation in a brief prompt, but I would agree some additional clarification around the passkey / 2FA overlap could be helpful. While I can't say this is something that will be changed, I've shared your comments with the team. 

      Thanks for your consideration and feedback on this. If we can help with anything, feel free to reach out!

      49283627