Forum Discussion

Former Member's avatar
Former Member
2 years ago

largeBlob support in passkeys?

Apologies if this is not the right forum for this type of question. But I'm working on a website that will use passkeys for authentication. Additionally, I'm trying to use the https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API/WebAuthn_extensions#largeblob to store some extra data along with the passkey. I know Safari recently started supporting this, and I was wondering if it was possible with 1Password as well? It doesn't seem to advertise support (via getClientExtensionResults), but I wanted to confirm that was the case.

Thank you!
Dan


1Password Version: 8.10.23
Extension Version: Not Provided
OS Version: macOS 14.2.1
Browser: Safari

7 Replies

  • JoePalmer's avatar
    JoePalmer
    New Contributor

    Hi 1P_Dave​,

    I'm just following up on my previous message. Is adding largeBlob support something you would still be willing to file a feature request for?

    Let me know if there are any more details you would like from our use case.

    Many thanks,

    Joe

  • asitnik

    Thank you for the request, I've shared your use case and feedback with the team. 🙂

    -Dave

    ref: PB-39789544

  • asitnik's avatar
    asitnik
    New Contributor

    I would need largeBlob in my local-first webapp to store end-to-end encryption password on the key.

  • @dcwatson

    That sounds like a interesting use of the largeBlob extension! While I can't make any promises, I've filed a internal feature request on your behalf and the team will look into the feasibility and value of supporting largeBlob in the future.

    Thank you for the feedback!

    -Dave

    ref: PB-37911600

  • Former Member's avatar
    Former Member

    Sure! What I'm trying to do is simplify management (and sync) of E2E encryption keys. So when you sign up for an account, you register a passkey, and your browser uses its https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto to generate a couple keypairs (for signing and key exchange). I send the public keys to the server, and store the private keys alongside the passkey (using the largeBlob extension). It's totally transparent to the user, the private keys never touch my server, and it syncs to all their devices automatically - no scanning QR codes or implementing my own key wrapping/syncing mechanism.

    Thanks so much for the response - a feature request would be lovely! And let me know if you'd like any more information.

    Thanks,
    Dan

  • Hello @dcwatson! 👋

    Thanks for the question! 1Password doesn't currently support the largeBlob extension for passkeys and I haven't seen too many requests for support come in yet. Can you tell me a little more about the data that you'd like to store with the passkey? I would be happy to file a feature request on your behalf with our product team.

    I look forward to hearing from you.

    -Dave

    • JoePalmer's avatar
      JoePalmer
      New Contributor

      I know this is an old thread but I'd love to pick up this discussion again now that largeBlob is supported natively across the Apple ecosystem. There is a similar ongoing discussion on this Chrome issue post:

      https://issues.chromium.org/issues/40283676#comment25

      I'd love to get the latest thinking from 1Password on supporting largeBlob in passkeys. We use 1Password all the time and have a great use case for largeBlob so it would be amazing to be able to store them in 1Password along with everything else. Currently we have to split out credentials across 1Password and the Passwords app to do everything we need.

      Is this a feature that would be considered for 1Password for the future?