Level up your business security with free, on-demand training and certification. Explore 1Password Academy today →
Forum Discussion
amh686
3 hours agoNew Contributor
I *really* need to turn off passkey support
I use 1Password everywhere: on Apple devices, on linux, on Windows, etc. I generally use the web app and browser add-ons on desktop. However, my day-to-day work environment is late Ubuntu. What I do...
1P_Dave
Moderator
2 hours agoHello amh686! 👋
Thanks for reaching out. You can turn off passkey support with these steps:
- Open your browser.
- Right-click on the 1Password icon in your browser's toolbar and click Settings.
- Turn off "Offer to save and sign in with passkeys".
You'll need to follow these steps in each browser and browser profile where you're using 1Password. It sounds like you've already toggled off "Offer to save and sign in with passkeys" so you shouldn't be seeing any passkey prompts from 1Password. Can you please post a screenshot of the prompt that's still appearing in your browser? That will help me to better understand the situation.
Like other people, I fail to see how passkeys help us and make us more secure.
Unlike passwords, you can’t create a weak passkey. Passkeys are generated by your device using a public-private key pair, which makes them strong and unique by default. Passkeys can’t be phished like a traditional password because the underlying private key never leaves 1Password – this also makes them resistant to social engineering scams.
Passwords, even those supplemented by a TOTP authenticator app, can still be phished. You can still be tricked into entering your password and TOTP into a fake website that masquerades as the real website. A passkey solves this problem since it can only be used with the original website that you created it for.
Two-factor authentication was designed to add an additional layer of protection to passwords against phishing. As mentioned, passkeys are already resistant to phishing and can be considered to have the same level of security as a password plus two-factor authentication, with a lot less friction.
-Dave