Bug: Unable to add an account to 1Password on iOS when using a Security Key for 2FA

Hi there BrainD

At time of writing, there is an issue affecting signing in to 1Password for iOS if you have only a hardware security key such as a YubiKey set as your two-factor authentication method. Our Development team are investigating this issue, and I'm sorry for the inconvenience it's causing right now.

To work around this for now, you can add an authenticator app in your two-factor authentication settings for your 1Password account, and use a one-time password to sign in to 1Password for iOS.

☞ Turn on two-factor authentication for your 1Password account

I'll add this thread to our internal tracker for this issue.

— Grey

ref: dev/core/core#20680

+1 same issue

Have 2FA with Yubikey 5ci
iOS app was having trouble editing passwords.

So I reinstalled the app
Unable to login again
Deauthorized the iOS app using a web login on Mac
Deleted the iOS app
Reinstalled the iOS app
Login fails with “ We weren't able to sign in to your
account. Maybe there's a typo? Check your sign-in details and try again.”

Verified the login and password and am able to login with a safari browser, which prompted me for a Yubikey.

But app doesn’t prompt for a Yubikey, just fails to login (note:credentials are verified to be correct)

iOS app is not usable. Please help

Hi there @itsbrenoakes

At the moment, our Development team are looking into why customer who have two-factor authentication turned on for their 1Password account (but only using a hardware security key) are having trouble signing in to 1Password for iOS. Sorry about the inconvenience there.

What we have found is that adding an authenticator app to your 1Password two-factor authentication options will mean you can use a one-time password to sign in to 1Password for iOS successfully without having to turn off two-factor authentication completely. The problem only appears when a hardware security key is the only two-factor authentication method.

We're tracking this issue internally, and I've added this thread to our investigation. Let me know if you have any questions or need any help. :)

— Grey

ref: dev/core/core#20680

I wanted to test and this is how it does for me.
I have both TOTP authenticator and YubiKey 5 NFC enabled.
So the YubiKey works using NFC if I am signing in thur the browser every time.
So after signing in I decided to deauthorize all my devices from the browser.
Then I try resigning into app on all my devices using the YubiKey 5 NFC, which would not work that way.
So I had to use the TOTP authenticator and only that worked.

The other problem I noticed if it is a problem I am not sure. This might be just the way it is.
So after deauthorizing my devices and signing back in I went back to the deauthorize area just to see and noticed my current device re shows back and the name of my device was almost correct, but not quite exact. It will show all the letters in my device name, but not any of the numbers or periods that are also in my device name, also it does show the first and last letter in the name just not the numbers or periods in between.
It is defiantly my device or devices.
I have seen other websites not show a whole device name, because it was maybe too long a name, but I have never seen any of mine show from beginning to end minus any letters or numbers.
My concern about this is when people check their authorized devices and match it up with what ever they named their device.
Maybe I am just crazy, but I assume most people do not rename old or mainly new devices and just go with the default about name.
I on the other hand like to name my devices similar, but slightly different that way if you have more than one same type device it is a way to keep up with which device is authorized besides ip address.

The first part was just to let you know and I am sure a fix is in the works.

The second part I just explained it the best I could.
It might even be important and nothing to be worried about and just accept that is how it shows the name of device when authorized.

I will take whatever you say.

found out it was because I have my Yubikey attached to the account

I have the added my Yubikey to my account and I am getting the message of my password not working when I know it is correct on the app. when i take the Yubikey off of my account I can log in to the app. Anyway I can fix this.

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

I can’t log into the app I have tried everything. I know it’s the right password as I can log in online but not in the app.

I'm happy that geekymatrix's post helped. 🙂

-Dave

@geekymatrix Thanks for posting this thread. I hit the same issue today when resetting my phone. I was tearing my hair out!