Forum Discussion

ProratedMongoose's avatar
ProratedMongoose
New Contributor
7 months ago
Solved

How do I disable passkey support?

How do I disable all prompting or integration for passkeys in the 1password browser plugin for safari?

  • Hello ProratedMongoose! 👋

    Thanks for reaching out! Is there a particular reason why you wanted to turn off passkey support for 1Password in Safari? Passkeys are the future of authentication and I would recommend upgrading to passkeys wherever possible: Save and sign in with passkeys in your browser

    That being said, you can turn off passkey support by following these steps: 

    1. Open your browser.
    2. Right-click on the 1Password icon in your browser's toolbar and click Settings
    3. Click Autofill & save.
    4. Turn off "Offer to save and sign in with passkeys".


    If you're an administrator for a 1Password Business membership then you can also turn off passkeys for your entire team using app usage policies

    -Dave

8 Replies

  • Hello ProratedMongoose! 👋

    Thanks for reaching out! Is there a particular reason why you wanted to turn off passkey support for 1Password in Safari? Passkeys are the future of authentication and I would recommend upgrading to passkeys wherever possible: Save and sign in with passkeys in your browser

    That being said, you can turn off passkey support by following these steps: 

    1. Open your browser.
    2. Right-click on the 1Password icon in your browser's toolbar and click Settings
    3. Click Autofill & save.
    4. Turn off "Offer to save and sign in with passkeys".


    If you're an administrator for a 1Password Business membership then you can also turn off passkeys for your entire team using app usage policies

    -Dave

    • ColoradoMarmot's avatar
      ColoradoMarmot
      New Member

      A bit late to the party, but I'll be happy to answer why I'm not interested in passkeys.

      In addition to just being clunky to use, no one has been able to satisfactorily explain how to recover them when *all* the trusted devices are lost or stolen.  

      Because if the fallback in those situations is to use email verification (which so far it looks like every site will use), then why bother with passkeys when the system can be forced into a very insecure access method (and that of course, assumes that the email account isn't also protected by a lost passkey).  Login security is only as secure as the least secure fallback method.

      The issue with 1P is that it prompts on every single page refresh on a site to create a passkey.  if I've said no, then darn it, stop prompting me on that site.  So my only other alternative is to disable it completely (which I've now happily done thanks to finding this thread).

      Passkeys need more time in the oven.  Fine for corporate internal use, where there's a helpdesk that can help recover account access (or be socially engineered to provide it, but that's another story).  Completely different situation for consumer sites where you can never get a human being to assist.

    • ProratedMongoose's avatar
      ProratedMongoose
      New Contributor

      My question has seemingly been resolved with that answer.

      After helping the 4th person get themselves back into accounts that they got locked out of because of the terrible state of Passkey usability I came to the conclusion that for many, this half-baked feature should be turned off.

      See also these articles which I would assume 1password is familiar with. 

      • salv0's avatar
        salv0
        Occasional Contributor

        I'll second your "half-baked" observation.  I never initiated it on my account, yet upgrading to v8 led to a persistent/annoying "No passkeys available" prompt on my Android (with the unhelpful option to "Use a different device"). I get the impression they have organizationally changed along with their business values.