Forum Discussion

Damnatus's avatar
Damnatus
Dedicated Contributor
2 years ago

How does an app know that the passkey is saved in 1Password?

Hi, I just added the Amazon passkey via their app (to check if it works with the app since there were issues with that (re: PayPal) previously to iOS 17.2 and noticed that it (the Amazon App) labe...
ios
1P_Dave's avatar
1P_Dave
Icon for Moderator rankModerator
2 years ago

Hello Damnatus! 👋

Thank you for the question! Passkeys contain an Authenticator Attestation Global Unique Identifier (AAGUID) which declares that a passkey was created using a certain provider. Services can use the AAGUID to label the passkeys that you create (for example, by labeling them as "1Password") in order to improve the user experience with that service.

Apps don't have access to any information that you've saved in 1Password, nor do they have access to any information about the vault that you've saved the item in.

I believe that some services already use the AAGUID to specify what kind of providers can be used with their service. For example, both Microsoft Entra and Okta allow you to add approved authenticators by AAGUID.

I hope that helps! 🙂

-Dave