How to make passkeys in 1Password certified?

oschif

The team is closely following the development of certifications that apply to passkey authenticators like 1Password. As mentioned, this kind of certification currently only applies to U2F and FIDO2 hardware security keys, not software authenticators like 1Password.

The certification mentioned in the page that you linked to applies to FIDO's Universal Authentication Framework (UAF) which is a different protocol where the authenticator and relying party are the same company. For example, a bank may wish to create an authenticator for their services. UAF does not apply to authenticators like 1Password that want to authenticate any service, UAF only applies to a single service.

It sounds like the website that you're signing into currently requires either a hardware security key or an Android device "system key". Both passkeys and hardware security keys are a type of Web Authentication (WebAuthn) credential. WebAuthn is a standard developed by the FIDO Alliance (of which 1Password is a member): FIDO2: Web Authentication (WebAuthn) - FIDO Alliance

I've filed an issue with our development team to have them look into turning off 1Password's passkey prompts on the MojeID website in order to reduce confusion since passkeys saved in a software authenticator like 1Password won't work there. For now, it looks like using a hardware security key or an Android device are the options provided by the website for you to use. I recommend that you remove the passkey from both the MojeID website and from 1Password and then use either a hardware security key or an Android device as recommended by MojeID.

Let me know if you have any questions. 🙂

-Dave

ref: dev/core/core#32710