This discussion was created from comments split from: Works with yubikeys? iPhone Pin protection ?.

That has been in beta since 2023. Almost 2 years in Beta just means this feature has very little priority, unfortunately. To test it, we must create a Test account, can't even use a normal account, which doesn't make it easy.

With apologies for being prolix -- I see that 1Password already does support YubiKeys as a 2FA option, but it is at present only configured to require a 2FA option when initially enrolling a new device. It is encouraging to see token-style technology incorporated into 1Password, now it just needs to be strengthened to its full potential: I request that the YubiKey (+ YubiKey PIN, optionally) 2FA method be extended in the form of a additional 1Password account preferences, as follows: Checkbox: "Require 2FA token on EVERY 1Password unlock, on any device. (Mobile/desktop/web.) Additional option: "...after X minutes, hours, days". (I.e. only require the 2FA token for 1Password unlock after a configurable time period since previous unlock.) If it is not already clear, it is also important to be able to configure 2FA-unlocking so it is the ONLY available method, not just an additional/backup method alongside plain password, TouchID, or Apple Watch.

gosmond Thank you for the detailed feedback! I appreciate you sharing more about your use case so that I can better understand the need here. I think that our passkey unlock beta, which already allows you to use a security key to unlock a 1Password account, provides the functionality that you're looking for: Unlock 1Password with a passkey (beta) YubiKey security keys allow you to set a PIN so that the PIN is required before someone is able to use a saved passkey: Understanding YubiKey PINs – Yubico Passkey unlock is currently being tested in the beta but hopefully will be rolled out to other accounts in the future. 🙂 -Dave

Not sure if this is the right place to discuss (vs. starting a new thread,) but since I saw YubiKeys mentioned I'll give it a go. I would like the ability to associate any number of YubiKeys (or their equivalent hardware-based FIDO / webauthn equivalents) directly in the 1Password for Mac desktop app. I.e. for unlocking the local 1Password vault / app itself. When implemented with an additional 4-digit PIN code (in 1Password natively, not within the hardware-key prompt), this could improve overall 1Password security and convenience by allowing a very secure main 1Password unlock password, while making it quick and easy for the user to unlock 1password just by tapping their YubiKey device and entering a quick 4-digit PIN code. Only 3 tries allowed for said PIN code, after which 1Password would fall back to requiring the full-length main 1Password-unlock password.

Wouldn't local FIDO2-resident-key unlock be better? I.e., the FIDO2-key ultimately verifies user verification, through either PIN, biometrics, or something else.

Feature request: Unlock 1Password with a Yubikey

33 Replies

gosmond
New Contributor
2 years ago
Not sure if this is the right place to discuss (vs. starting a new thread,) but since I saw YubiKeys mentioned I'll give it a go.

I would like the ability to associate any number of YubiKeys (or their equivalent hardware-based FIDO / webauthn equivalents) directly in the 1Password for Mac desktop app.

I.e. for unlocking the local 1Password vault / app itself.

When implemented with an additional 4-digit PIN code (in 1Password natively, not within the hardware-key prompt), this could improve overall 1Password security and convenience by allowing a very secure main 1Password unlock password, while making it quick and easy for the user to unlock 1password just by tapping their YubiKey device and entering a quick 4-digit PIN code.

Only 3 tries allowed for said PIN code, after which 1Password would fall back to requiring the full-length main 1Password-unlock password.

Forum Discussion

Feature request: Unlock 1Password with a Yubikey

33 Replies

Featured discussions

February 2026 at 1Password: Benchmarking AI security & helping developers access secrets everywhere

Recent discussions

Hardware Category

How to use Passkeys on Temp Device

iOS Safari extension cannot connect to app

Autofill on Hilton website stopped?

Web Extension has memory leak